Ares Horizon
/
Trust Center

Ares Horizon

Customer Security & Data Protection Principles

antoni@areshorizon.comPrivacy policyUpdated November 2026
Download commitment (PDF)

At Ares Horizon, security, confidentiality, and data sovereignty are critical for organisations in the defence and aerospace industries. The platform is designed around security-by-design principles, so customers keep control over sensitive contractual, supplier, and operational information.

Compliance

  • ISO/IEC 27001:2022In progress
  • NIST CSF 2.0Aligned
  • CIS Controls v8.1Aligned
  • OWASP ASVS 5.0Aligned
  • NIST AI RMFAligned

These frameworks guide our security programme and technical practices. References to these frameworks do not represent independent certification or verification of full compliance.

Controls

Customer choice

  • Customer-controlled on-premises infrastructure
  • Secured cloud under the agreed architecture
  • The same protection principles in both models

Controlled connectivity

  • On-premises operation without general public internet
  • Inbound cloud access limited to approved IP ranges
  • Outbound connectivity limited to approved endpoints

Private AI pathways

  • Local AI keeps data, prompts, and outputs in your environment
  • External models only where training on customer content is prohibited
  • Data minimisation and anonymisation before transfer

Authorized access

  • Enterprise SSO
  • Role-based access control
  • No standing access without customer authorization

ISO/IEC 27001:2022 certification roadmap

  1. 1November 2026ISMS scope, governance, risk assessment, security policies, and Statement of Applicability.
  2. 2November – December 2026Security control implementation, ISMS operation, and evidence collection.
  3. 3December 2026Internal audit, management review, and corrective actions.
  4. 4December 2026 – January 2027Anticipated external certification audits — Stage 1 and Stage 2.
  5. 5Following external auditCertification decision, subject to successful audits and certification body approval.

External certification audit timing is anticipated and remains subject to audit readiness, availability, and certification body approval.

Resources

FAQ