This is the note we send to every operator before a pilot. It is short because the rules are simple.
Housekeeping telemetry: battery and array voltages, currents and temperatures, timestamps, orbit elements, and the activity plans you give us. Never payload data. Never command links.
In the European Union, on Google Cloud in Belgium (europe-west1). The provider holds ISO 27001, 27017, 27018 and SOC 2 for that infrastructure. Enterprise customers can run everything inside their own perimeter instead.
The free analysis keeps nothing after the run. Workspaces keep summaries, reports, the column mapping and alert rules per satellite; raw telemetry is discarded after processing. Everything is deleted on request within 30 days.
You, through your workspace key. Keys are scoped to your tenant, can be rotated or revoked at any time, and every access is logged. Apsia staff access your data only to run a support request you opened, and that access is logged too.
TLS for every connection. Encryption at rest on the provider's managed storage. Connectors to your telemetry store are read-only and use credentials you can revoke.
Send anything to a satellite. Train models on your data without written consent. Share your data with anyone. Move it outside the EU. Fleet-level learning uses aggregate, anonymised parameters only, and you can opt out.
Google Cloud EMEA (hosting and storage, Belgium). We add a sub-processor only with notice to workspace customers.
If we detect unauthorised access to your data, we tell you within 72 hours with what happened, what was affected and what we did. No exceptions.
Apsia is not yet ISO 27001 certified. We run on certified infrastructure, keep the controls above in writing, and answer security questionnaires within five working days. Certification is scheduled once the first operator contracts require it in writing; customers in the Spanish public sector can ask about the National Security Scheme (ENS) path.
Use the contact form with "security" in the subject. A person answers.
Version 1 · September 2026