Configuration
Admin & Model Ops
Administration for source policy, model versions, security configuration, thresholds, deployment/data residency, monitoring and change governance.
Security profile
MFA required
Privileged access via PAM
Encrypt raw document store
Immutable audit sink
Data sovereignty
Primary processingIndonesia profile
Primary storageIndonesia profile
External connectorsPer-provider assessment
Cross-border gateEnabled
Subprocessor registerRequired
Model lifecycle
PromotionDev → PoC → UAT → Prod
ApprovalModel owner + risk + privacy/security
RollbackVersioned deployment
DriftThreshold alerts
RetrainingControlled change request
| Model | Purpose | Version | Deployment | Validation | Drift | Last change |
|---|---|---|---|---|---|---|
| document-ai-id | Classification/OCR/tamper | 0.9-poc | Private | PoC pending | — | Aug 2026 |
| website-lob-id | LOB/category classification | 0.8-poc | Private | PoC pending | — | Aug 2026 |
| sentiment-id | Review/social sentiment | 0.7-poc | Private | PoC pending | — | Aug 2026 |
| entity-resolution-id | Adverse-media matching | 0.6-poc | Private | PoC pending | — | Aug 2026 |
Security assurance evidence
RFI requests certifications and security practice evidence. This prototype does not claim certifications.
- ISO/IEC 27001 certificate / scope — attach vendor evidence.
- SOC 2 report — if applicable.
- Encryption design and key-management responsibility.
- Access-control model and privileged-access process.
- Penetration testing / vulnerability-management process.
- Incident response and notification SLA.
Support & maintenance configuration
Local Indonesia supportTo be confirmed by provider
Incident SLAPoC / commercial response item
Model retrainingControlled update mechanism required
Knowledge transferAdmin + analyst + developer docs