Question 1

How does Ekonava's AI ensure IFC PS1 compliance?

Accepted Answer

Our NLP engine analyzes ESMS documents against IFC PS1 criteria, providing instant gap analysis, maturity scoring, and corrective recommendations.

Question 2

Is Ekonava's platform suitable for African ESG regulations?

Accepted Answer

Yes, our AI is trained on both IFC standards and regional frameworks, ensuring local compliance.

Question 3

Can you inquire for custom make framework?

Accepted Answer

Yes, for institutions using their custom made framework, we can customize the platform according to your needs.

Question 4

How does Ekonava protect my uploaded documents and data?

Accepted Answer

We use military-grade AES-256 encryption for data at rest and TLS 1.3 for data in transit. All documents are processed in-memory with automatic PII redaction and are automatically purged after analysis under our zero-retention policy.

Question 5

Is Ekonava GDPR compliant?

Accepted Answer

Yes, our platform is built with GDPR principles including data minimization, purpose limitation, and user rights support. We implement strict data protection measures aligned with EU data protection standards.

Question 6

Do you store my original documents after processing?

Accepted Answer

No, we have a strict zero-retention policy. Documents are processed in memory and automatically purged immediately after analysis. Only assessment results are stored if you choose to save them.

Question 7

How is Personally Identifiable Information (PII) handled?

Accepted Answer

Our system automatically detects and redacts PII using Microsoft Presidio before any analysis occurs. Sensitive information like names, emails, and ID numbers are replaced with anonymized tokens prior to processing.

Question 8

What security certifications does Ekonava maintain?

Accepted Answer

We maintain SOC 2 Type II compliance, PCI DSS Level 1 for payments, and follow industry best practices for data security. Our infrastructure is hosted on secure AWS cloud platforms with enterprise-grade protections.

Question 9

Who has access to my data?

Accepted Answer

Only authorized Ekonava personnel with strict access controls can access system data for legitimate operational purposes. Access is strictly limited to ethical and legally required circumstances such as technical support, system maintenance, or compliance with valid legal processes like court orders. Client data is protected by role-based access controls, and we follow the principle of least privilege. No third parties have access to your data without explicit consent.

Question 10

What happens to my data if I cancel my account?

Accepted Answer

Upon account cancellation, all your data is permanently deleted from our systems. This includes assessment results, uploaded documents, and any personal information, in compliance with data protection regulations.

Question 11

Where is Ekonava's cloud infrastructure hosted?

Accepted Answer

Our platform is hosted on Amazon Web Services (AWS) with data centers located in secure, SOC 2 and ISO 27001 compliant facilities. AWS provides enterprise-grade security including DDoS protection, network firewalls, intrusion detection, and 24/7 physical security monitoring.

Question 12

What cloud security measures are in place?

Accepted Answer

We implement multiple layers of cloud security including: AWS Security Groups and NACLs for network segmentation, AWS WAF for web application protection, automated vulnerability scanning, encrypted database storage (AWS RDS/Aurora), regular security audits, and comprehensive audit logging with retention policies.

Question 13

How is data backed up and recovered?

Accepted Answer

We maintain backups with point-in-time recovery capabilities. Backup data is encrypted and stored securely. Our disaster recovery plan ensures business continuity with defined RTO (Recovery Time Objective) and RPO (Recovery Point Objective) targets.

Question 14

What is your incident response protocol?

Accepted Answer

We have in mind a formal incident response plan that includes immediate containment, investigation, notification procedures per GDPR requirements, and post-incident analysis. All personnel receive regular security training and incident response drills.

Question 15

Can Ekonava be deployed on-premises for enhanced security?

Accepted Answer

Yes, for organizations requiring maximum data control, we offer on-premises deployment options. This gives you complete ownership of your data and infrastructure while maintaining all the AI-powered ESG assessment capabilities.

Question 16

How do you ensure ethical data handling by staff?

Accepted Answer

All Ekonava personnel sign comprehensive confidentiality agreements and undergo rigorous background checks. We enforce strict ethical guidelines where data access is permitted only for legitimate operational needs, never for commercial exploitation. Access is logged and monitored, with violations subject to immediate termination and legal action.

Question 17

What legal protections govern data access?

Accepted Answer

Our Terms of Service and Privacy Policy strictly prohibit unauthorized data access. Any staff access requires legitimate business purposes and is governed by legal frameworks. We will only disclose data when legally compelled by valid court orders, subpoenas, or other legal processes, and we notify affected clients whenever legally permitted.

Welcome to EKONAVA