Identity and authorization
Identity, authority and protected assets are established before protection workflows are activated.

Security & governance
Eterna combines technical controls with human review so protection work remains authorized, traceable and proportionate.
Identity, authority and protected assets are established before protection workflows are activated.
Client records are separated by account and role-based access governs sensitive operational views.
Relevant URLs, timestamps, source context and supporting material can be retained in case history.
Automated signals do not establish wrongdoing. Reviewers assess context, evidence and eligibility before consequential action.
Case and enforcement workflows preserve status history so decisions can be traced and reviewed.
Authorization, evidence, route verification, approval, allowlist and operating controls must align before eligible submissions proceed.
Operational governance
Retention and handling are scoped to the protection purpose, client authorization and applicable service requirements. Sensitive information is limited to authorized operational use.
Service providers are assessed for the function they support. Incident concerns can be raised directly with Eterna for triage and response.
Responsible disclosure
If you believe you've found a vulnerability in Eterna's platform, report it to us directly before disclosing it publicly. Eterna investigates good-faith reports and will acknowledge receipt.
Please do not access, modify or exfiltrate client or case data, and avoid testing that could degrade service for others. Include enough detail to reproduce the issue.
legal@protectbyeterna.com