Viktor is responsible for IT security. He knows nobody means harm; everyone just wants to get their work done quickly. With Omnisnap there is exactly one way to change software, and every step along it is reviewed and logged.
Customer lists in outside AI tools, files in private clouds, firewall rules someone switched off.
Every change goes through the Omnisnap airlock: reviewed by AI and an engineer, signed off on staging.
Access, versions and sign-offs are logged. Viktor answers questions with a report, not a promise.
For reading rather than watching: each chapter of the film as a short text.
A customer list in an outside AI tool, contracts in a private cloud, an invoice that is really an .exe. Each of these shortcuts saves someone ten minutes. Viktor usually only sees the consequences.
Nobody means harm. And still the company is at stake.
Every customer runs in their own closed private cloud in Zurich. There is exactly one way to change something: the ticket through the Omnisnap DevOps Gateway. The AI checks the request against the existing source code, and guardrails block anything harmful. Development happens in an isolated environment with test data.
“There is no back door. So I don’t have to guard one.”
Viktor’s policies no longer live only in the handbook. Roles, sign-offs and access rights are built into the processes: whoever may sign something off sees the button. Whoever may not, does not. Every sign-off is recorded with the person, the time and the reason.
“The rule isn’t in the wiki. It’s in the process.”
Access to production data is the exception: Named engineers only, only as far as operations and support require, with multi-factor sign-in and every access logged. Every version is archived, and every change has a ticket, a reviewing engineer and a sign-off. What used to take weeks of preparation, Viktor exports the evening before.
What used to take weeks is a walk in the park.
At the quarterly review, management asks whether everything the teams are building is secure. Viktor shows the access report. Built fast is not the same as run securely: at Omnisnap, one is the condition for the other.
“The report is the answer. Not a promise.”
This is the path every change takes before it reaches Viktor’s production. There are no other ways in.
No marketing promises. Set down in the SLA, described technically on the security and technology pages.
One way in, five checks: AI, guardrails, isolated development, the four-eyes principle and your sign-off on staging.
The airlock in detailOn request, the Omnisnap Cloud runs in your own cloud or on-premise, with an interface from production to development: our engineers then never see your production data.
Access to production dataAI in your processes is Google Gemini via Vertex AI, processed in Zurich, contractually without training on your data. For programming, AI works with source code only, never with your customer data.
AI and data on the technology pageOn ISO/IEC 27001 and SOC 2/3 certified infrastructure · revFADP · GDPR. Data encrypted at rest (AES-256) and in transit (TLS). Customer data is stored and processed in Zurich. Keys and secrets sit in a key vault in Zurich.
More on the infrastructureSend us your list of questions. We answer it within one working day, point by point.
