[{"data":1,"prerenderedAt":478},["ShallowReactive",2],{"blog-pl-zero-trust":3,"blog-related-pl-zero-trust":248},{"id":4,"title":5,"author":6,"body":7,"coAuthors":233,"date":234,"description":235,"detail":236,"extension":237,"featured":236,"image":238,"imageSize":233,"meta":239,"navigation":240,"path":241,"railTitle":233,"seo":242,"stem":243,"summary":233,"tags":244,"unlisted":236,"updatedAt":233,"video":233,"__hash__":247},"blog\u002Fblog\u002Fen\u002Fzero-trust.md","Our Zero Trust security architecture","Pierre-Louis",{"type":8,"value":9,"toc":222},"minimark",[10,14,17,20,23,28,31,34,37,40,53,56,60,65,68,71,83,90,93,97,100,206,209,213,216,219],[11,12,13],"p",{},"Would you leave your front door unlocked simply because your neighbourhood has a low crime rate?",[11,15,16],{},"Many companies, even by meeting compliance standards, implicitly do just that.",[11,18,19],{},"Entropia has validated the SOC2 Type II level controls, which corresponds to proving that the neighbourhood is under constant surveillance and demonstrably safe.",[11,21,22],{},"But we have chosen to go further and raise the bar with a Zero Trust model.",[24,25,27],"h2",{"id":26},"what-zero-trust-means","What Zero Trust means",[11,29,30],{},"For decades, corporate networks were built like castles, or fortresses: high walls, a deep moat, and the assumption that anyone allowed inside was trustworthy.",[11,32,33],{},"Unfortunately, modern attackers might still steal a key or tunnel under the moat. If they ever manage to get inside, they can wander freely.",[11,35,36],{},"Zero Trust rejects the castle. Instead, it assumes that no user, device, or network packet is trustworthy by default. Each request to access resources, whether from an employee, contractor, or application, is treated as if it comes from an untrusted network until it has been inspected, authenticated, and verified. Access is granted only for the minimum necessary purpose and only for as long as needed.",[11,38,39],{},"This model is implemented by leading companies such as Google where our CTO, Pierre, spent six years as a Solutions Engineer, gaining firsthand experience of how it works in practice. Google frames the model around three core principles:",[41,42,43,47,50],"ul",{},[44,45,46],"li",{},"Assume all network traffic is a potential threat at all times. Every user, device, and flow is subject to ongoing authentication, authorisation, and validation, with any request lacking explicit permission automatically denied.",[44,48,49],{},"Enforce least-privileged access. Each entity is granted only the minimum rights needed to complete a task, limiting the ability of attackers to move laterally if compromise occurs.",[44,51,52],{},"Always monitor. Continuous oversight analyses and manages activity in real time, identifying potential threats, incidents, and anomalies to investigate.",[11,54,55],{},"These principles, first articulated by Forrester and formalised by the U.S. National Institute of Standards and Technology (NIST), form the foundation of our own approach.",[24,57,59],{"id":58},"how-zero-trust-raises-the-bar-above-soc-2","How Zero Trust raises the bar above SOC 2",[61,62,64],"h3",{"id":63},"what-is-soc-2","What is SOC 2",[11,66,67],{},"Customers increasingly demand evidence that their providers handle data responsibly. SOC2, created by the American Institute of CPAs, has become one of the most widely recognised audit frameworks.",[11,69,70],{},"The standard evaluates an organisation's controls across five \"Trust Services Criteria\": security, availability, processing integrity, confidentiality, and privacy.",[11,72,73,74,78,79,82],{},"A ",[75,76,77],"strong",{},"Type I"," report describes how controls are designed at a single point in time.\nA ",[75,80,81],{},"Type II"," report, which we have achieved, goes further: it validates that those controls operate effectively over months, not merely on paper.",[11,84,85],{},[86,87,89],"a",{"href":88},"\u002Fblog\u002Fsoc2","> Read more about our SOC2 Type II certification",[11,91,92],{},"But as robust as it is, SOC 2 is still a framework of proof, not an architecture of defence. It tells customers that the right doors are locked and checked regularly. It does not redesign the building itself.\nThat is why we describe SOC 2 Type II as our floor, not our ceiling.",[61,94,96],{"id":95},"where-zero-trust-goes-further","Where Zero Trust goes further",[11,98,99],{},"Zero Trust pushes security beyond compliance checklists into systemic resilience. To illustrate the contrast in concrete terms, here are a few key examples where Zero Trust provides stronger protection than SOC 2 expectations. The list is not exhaustive, but it highlights the most important areas where the difference is most tangible.",[41,101,102,115,128,141,154,167,180,193],{},[44,103,104,107],{},[75,105,106],{},"Stolen credentials cannot enable long-term access",[41,108,109,112],{},[44,110,111],{},"SOC2: Restrict access to authorised users (often with MFA and roles)",[44,113,114],{},"Zero Trust: Continuous verification of user identity, device health, and behaviour at every request (that is, every attempt by a user, device, or application to access a resource)",[44,116,117,120],{},[75,118,119],{},"Containing breaches, not only detecting them",[41,121,122,125],{},[44,123,124],{},"SOC2: Monitor systems for anomalies and respond to incidents",[44,126,127],{},"Zero Trust: Real-time enforcement that blocks risky actions before they escalate",[44,129,130,133],{},[75,131,132],{},"Stopping data exfiltration at the source",[41,134,135,138],{},[44,136,137],{},"SOC2: Encrypt data in storage and transit",[44,139,140],{},"Zero Trust: Add context-aware rules (e.g., downloads blocked from non-compliant devices)",[44,142,143,146],{},[75,144,145],{},"Eliminating lingering third-party access",[41,147,148,151],{},[44,149,150],{},"SOC2: Assess vendor risk and restrict external access",[44,152,153],{},"Zero Trust: Just-in-time, least-privilege access for third parties",[44,155,156,159],{},[75,157,158],{},"Limiting the blast radius of incidents",[41,160,161,164],{},[44,162,163],{},"SOC2: Demonstrate risk assessments and mitigations",[44,165,166],{},"Zero Trust: Architect systems to minimise blast radius by design",[44,168,169,172],{},[75,170,171],{},"Maintaining service resilience",[41,173,174,177],{},[44,175,176],{},"SOC2: Ensure system availability with continuity plans",[44,178,179],{},"Zero Trust: Design resilient architectures that isolate failures and keep services running",[44,181,182,185],{},[75,183,184],{},"Protecting confidentiality dynamically",[41,186,187,190],{},[44,188,189],{},"SOC2: Document confidentiality and privacy policies",[44,191,192],{},"Zero Trust: Enforce context-aware restrictions and encryption by design",[44,194,195,198],{},[75,196,197],{},"Reducing insider risk",[41,199,200,203],{},[44,201,202],{},"SOC2: Apply HR and access review policies",[44,204,205],{},"Zero Trust: Limit insider risk with least-privilege and continuous monitoring",[11,207,208],{},"And there is more to it: these examples illustrate some of the obvious contrasts, but Zero Trust also changes the way systems are conceived and built, embedding security into the architecture itself rather than treating it as a compliance exercise.",[24,210,212],{"id":211},"why-should-our-customers-care","Why should our customers care?",[11,214,215],{},"For dataroom customers, the implications are crucial. SOC2 compliance means your data is handled responsibly, Zero Trust means it is defended relentlessly. Breaches that would spill across a legacy dataroom provider's environment stop cold within ours.",[11,217,218],{},"Building on Zero Trust is more demanding for application developers, because security must be engineered directly into the architecture rather than bolted on later. Zero Trust requires grappling with identity-driven policies (deciding who can access which resources and under what conditions), network segmentation (designing the system so that even if one part is compromised, attackers cannot easily move to another), and continuous telemetry (collecting and analysing data about activity in real time to detect and prevent anomalies).",[11,220,221],{},"Together, the two frameworks signal Entropia's ambition to raise the bar for dataroom customers: SOC2 Type II proves we meet one of the toughest industry standards, while Zero Trust shows we aim beyond yesterday's definitions of secure.",{"title":223,"searchDepth":224,"depth":224,"links":225},"",2,[226,227,232],{"id":26,"depth":224,"text":27},{"id":58,"depth":224,"text":59,"children":228},[229,231],{"id":63,"depth":230,"text":64},3,{"id":95,"depth":230,"text":96},{"id":211,"depth":224,"text":212},null,"2025-07-28","Zero Trust explained: learn how Entropia elevates data room security beyond compliance frameworks.",false,"md","\u002Fblog\u002Fzero-trust-header-picture.png",{},true,"\u002Fblog\u002Fen\u002Fzero-trust",{"title":5,"description":235},"blog\u002Fen\u002Fzero-trust",[245,246],"solution","insights","48GrBEB7zKh-V9d2hw8Ovuaun9p9gCIfzQrPaAgbCos",[249,344,401],{"id":250,"title":251,"author":252,"body":253,"coAuthors":330,"date":332,"description":333,"detail":236,"extension":237,"featured":240,"image":334,"imageSize":233,"meta":335,"navigation":240,"path":336,"railTitle":337,"seo":338,"stem":339,"summary":340,"tags":341,"unlisted":236,"updatedAt":233,"video":233,"__hash__":343},"blog\u002Fblog\u002Fen\u002Fentropia-jimini-partnership.md","Entropia connects the data room to Jimini AI","Pierre-Louis Corteel",{"type":8,"value":254,"toc":324},[255,265,269,272,276,279,283,291,295,298,308,316],[11,256,257,258,264],{},"We are pleased to partner with ",[86,259,263],{"href":260,"rel":261},"https:\u002F\u002Fwww.jimini.ai",[262],"nofollow","Jimini AI",", the sovereign legal AI built for law firms and in-house legal teams. Legal professionals can now search, read, analyse or act on their Entropia data rooms directly from Jimini AI.",[24,266,268],{"id":267},"a-new-way-to-run-legal-due-diligence","A new way to run legal due diligence",[11,270,271],{},"Law firms, in-house legal teams and notaries working on M&A transactions spend days in the data room. Until now, to analyse a data room document in their legal AI, they had to download it from the data room first. With the Entropia connector, Jimini AI users can search and read the data room alongside the legal sources they already use in Jimini AI.",[24,273,275],{"id":274},"the-deal-documents-and-the-law-in-one-answer","The deal documents and the law, in one answer",[11,277,278],{},"In a single request, users can query the Entropia data room and legal sources together. They analyse contract clauses and check each one against the applicable law, with citations to the page in the data room and to the legal source. With the Analysis Grid, they apply the same questions to hundreds of data room contracts at once, each cell linked to the passage it came from.",[24,280,282],{"id":281},"entropia-tools-available-from-jimini-ai","Entropia tools, available from Jimini AI",[11,284,285,286,290],{},"The ",[86,287,289],{"href":288},"\u002Fresources\u002Fentropia-mcp-server","Entropia MCP server"," enables Jimini AI's Agent to browse the data room folders, run full-text searches, read documents and spreadsheets, and retrieve the questions and answers exchanged in Q&A threads. A clause to find, a seller's answer in the Q&A, a figure in a spreadsheet: legal teams simply ask Jimini AI.",[24,292,294],{"id":293},"under-the-rights-you-already-hold","Under the rights you already hold",[11,296,297],{},"Every request is initiated by a legal professional, scoped to their access rights in Entropia and logged under their name. Data room administrators decide which groups can use AI. Where the sell side allows it, the bidder's advisers work within their own permissions. Nothing reaches a counterparty from Jimini AI: a person reviews each drafted answer and sends it from Entropia. Both companies keep customer data under European control.",[299,300,301],"blockquote",{},[11,302,303,307],{},[304,305,306],"em",{},"\"Lawyers on a deal need the deal documents and the law side by side. Now they can work on both from the AI platform they have chosen,\""," said Pierre-Louis Corteel, CEO of Entropia.",[299,309,310],{},[11,311,312,315],{},[304,313,314],{},"\"Our ambition is to make Jimini AI the place where legal work gets done, seamlessly connected to the tools legal teams rely on. In M&A, that means bringing the data room directly into their workflow. With Entropia, lawyers can now manage the entire due diligence process within Jimini AI, from reviewing deal documents to drafting the final report. And as two European companies, we share a commitment to keeping sensitive deal data under European control,\""," said Raphaël Arroche, CEO of Jimini AI.",[11,317,318,319,323],{},"Discover Jimini AI at ",[86,320,322],{"href":260,"rel":321},[262],"jimini.ai",".",{"title":223,"searchDepth":224,"depth":224,"links":325},[326,327,328,329],{"id":267,"depth":224,"text":268},{"id":274,"depth":224,"text":275},{"id":281,"depth":224,"text":282},{"id":293,"depth":224,"text":294},[331],"Raphaël Arroche","2026-11-04","Legal teams can now search, read, analyse and act on their Entropia data rooms directly from Jimini AI, the sovereign legal AI.","\u002Fblog\u002Fjimini-partnership-cover.png",{},"\u002Fblog\u002Fen\u002Fentropia-jimini-partnership","Jimini AI partnership",{"title":251,"description":333},"blog\u002Fen\u002Fentropia-jimini-partnership","Legal teams can now search, read, analyse and act on their Entropia data rooms directly from Jimini AI.",[245,246,342],"changelog","ZMbapJnn_5FTkBkQ6AGv1JLABeKfPZzMIMrcPHUS1cU",{"id":345,"title":346,"author":6,"body":347,"coAuthors":388,"date":390,"description":391,"detail":236,"extension":237,"featured":240,"image":392,"imageSize":233,"meta":393,"navigation":240,"path":394,"railTitle":395,"seo":396,"stem":397,"summary":398,"tags":399,"unlisted":236,"updatedAt":233,"video":233,"__hash__":400},"blog\u002Fblog\u002Fen\u002Fentropia-model-ml-partnership.md","Entropia's Partnership with Model ML",{"type":8,"value":348,"toc":386},[349,359,362,369,372,375,383],[11,350,351,352,358],{},"We are pleased to announce a partnership with ",[86,353,357],{"href":354,"rel":355,"target":356},"https:\u002F\u002Fmodelml.com",[262],"_blank","Model ML",", the agentic operating system for financial services, used by some of the world's largest banks, asset managers and advisory firms.",[11,360,361],{},"Model ML builds custom and off-the-shelf agents which create, review and verify complex, document-heavy workflows for global investment banks, private equity houses, consulting firms and other major financial institutions.",[11,363,364,365,368],{},"Entropia was designed to support M&A professionals with AI, and that design extends beyond our own walls. A user connected from Model ML gets ",[86,366,367],{"href":288},"the same tools"," as Entropia's own AI, at the same depth.",[11,370,371],{},"Bankers working in Model ML can reach their Entropia data rooms without leaving it. From Model ML, a banker can search the data room, read documents, presentations and spreadsheets page by page, browse the folder structure, follow Q&A threads, check who has access to what, and act: create folders, tag documents, set permissions, draft Q&A answers that a human reviews and sends.",[11,373,374],{},"Each request is initiated by the user, scoped to the access rights they already hold, and logged in the data room audit trail under their name. Nothing reaches a Model ML user that they could not open in Entropia directly, and nothing reaches a counterparty from Model ML: a drafted answer is reviewed and sent by a human in Entropia, and the access of an active group in the data room cannot be changed from outside it.",[299,376,377],{},[11,378,379,382],{},[304,380,381],{},"\"Our partnership with Entropia is a meaningful addition to the Model ML platform for our M&A users. Access to Entropia's agentic data rooms directly in the Model ML platform means that our users can harness the full power of Entropia's agent-native platform without disrupting their existing workflows,\""," said Chaz Englander, CEO at Model ML.",[11,384,385],{},"The integration is available to joint customers with active Entropia data rooms, starting today.",{"title":223,"searchDepth":224,"depth":224,"links":387},[],[389],"Chaz Englander","2026-09-10","Bankers working in Model ML can now search, read and act on their live Entropia data rooms without leaving the platform, under their own access rights.","\u002Fblog\u002Fmodel-ml-partnership-cover.png",{},"\u002Fblog\u002Fen\u002Fentropia-model-ml-partnership","Model ML partnership",{"title":346,"description":391},"blog\u002Fen\u002Fentropia-model-ml-partnership","Bankers working in Model ML can now reach their live Entropia data rooms without leaving the platform.",[245,246,342],"RrYTYx7Q0M0_Gs5IBSEzgqXbk-fckPrjcrUqIT3yuA8",{"id":402,"title":403,"author":252,"body":404,"coAuthors":233,"date":467,"description":468,"detail":236,"extension":237,"featured":240,"image":469,"imageSize":233,"meta":470,"navigation":240,"path":471,"railTitle":472,"seo":473,"stem":474,"summary":475,"tags":476,"unlisted":236,"updatedAt":233,"video":233,"__hash__":477},"blog\u002Fblog\u002Fen\u002Fentropia-arx-partnership.md","Entropia x Arx: the deal pipeline and the data room, connected",{"type":8,"value":405,"toc":461},[406,409,412,426,430,433,437,440,444,447,451,454],[11,407,408],{},"A deal never lives in one tool. It starts in the CRM, where the banker tracks the mandate, the buyer list and the state of the relationship. It plays out in the data room, where the documents, the permissions and the Q&A live.",[11,410,411],{},"Between those two places, most teams work by hand. The buyer list gets retyped. The NDA is signed, someone remembers to grant access two days later.",[11,413,414,415,420,421,425],{},"We worked with the ",[86,416,419],{"href":417,"rel":418},"https:\u002F\u002Farx.deals",[262],"Arx"," team to close that gap. The integration between Arx, the CRM built for M&A advisors, and Entropia, our ",[86,422,424],{"href":423},"\u002Fproduct","data room",", is live.",[24,427,429],{"id":428},"create-the-pre-data-room-or-the-data-room-from-the-crm","Create the pre-data room or the data room from the CRM",[11,431,432],{},"From the opportunity in Arx, the team opens a pre-data room, complimentary, and starts collecting documents while the deal is still taking shape. No setup call. Once the mandate is signed, they switch to the full data room.",[24,434,436],{"id":435},"sign-in-with-your-arx-credentials","Sign in with your Arx credentials",[11,438,439],{},"Your Arx login opens Entropia. No second account to create, no extra password to manage across the team.",[24,441,443],{"id":442},"activity-comes-back-into-the-crm","Activity comes back into the CRM",[11,445,446],{},"Buyer engagement in the data room is visible from Arx as the deal runs. The banker reads it in the same place they track the rest of their pipeline, and the history stays attached to the counterparty for the mandates that follow.",[24,448,450],{"id":449},"getting-started","Getting started",[11,452,453],{},"If your firm already uses Arx and Entropia, the connection is made from Arx, by the data room administrator. It takes a few minutes and applies to the deals you choose.",[11,455,456,460],{},[86,457,459],{"href":458},"\u002Fbook-a-demo","Book a demo"," to see the integration running on your own deals.",{"title":223,"searchDepth":224,"depth":224,"links":462},[463,464,465,466],{"id":428,"depth":224,"text":429},{"id":435,"depth":224,"text":436},{"id":442,"depth":224,"text":443},{"id":449,"depth":224,"text":450},"2026-08-28","Open a pre-data room or a full data room from Arx, sign in with your Arx credentials, and read buyer engagement back in the CRM.","\u002Fblog\u002Farx-entropia-2.png",{},"\u002Fblog\u002Fen\u002Fentropia-arx-partnership","Arx integration",{"title":403,"description":468},"blog\u002Fen\u002Fentropia-arx-partnership","The integration between Arx and Entropia is live: open a data room from the CRM, sign in with your Arx credentials, and follow buyer engagement in Arx.",[245,246,342],"mYnxuahkvGc7XflRGme9TI_2aphjJNawNa-T5rOD740",1794484473221]