Your Well Data Is Your Business. We Keep It That Way.
GeoMaster is built on enterprise-grade security from day one โ not bolted on after the fact. UK-based infrastructure, end-to-end encryption, and full GDPR compliance.
UK-Based Infrastructure
All data stored and processed on Oracle Cloud Infrastructure in the London (UK South) region. Your data never leaves UK jurisdiction.
End-to-End Encryption
TLS 1.3 encrypts all data in transit. AES-256 encrypts all data at rest. Encryption keys are managed and rotated automatically.
GDPR Compliant
Full compliance with UK GDPR and EU GDPR. You retain ownership of your data. We act as data processor, not data controller, for well data.
No Data Sharing
Your well data is never sold, never shared with third parties, and never used to train AI models without your explicit opt-in.
Data Handling
What We Store, and What We Never Do
Complete transparency on how your data is handled โ before you sign up, not after.
๐ฆ What We Store
- โWITSML objects (trajectories, logs, mudLogs)
- โLAS files you upload
- โProject files and geological interpretations
- โGeoEngineโข query and conversation history
- โAccount data (name, email, company)
- โBilling and subscription records
๐ซ What We Never Do
- โSell your data to any third party
- โShare well data with other GeoMaster users
- โUse well data to train AI models without explicit opt-in
- โStore plaintext passwords (bcrypt-hashed only)
- โRetain data after account deletion (30-day grace period)
- โAccess your projects without a logged audit trail
Infrastructure
Built on Enterprise-Grade Cloud
Oracle Cloud Infrastructure โ the same platform used by global financial institutions and healthcare systems.
Oracle Cloud Infrastructure
UK South (London) region. ISO 27001 certified data centres. SLA-backed compute and storage. Data never leaves UK jurisdiction under normal operation.
Automated Encrypted Backups
Daily encrypted backups with 30-day retention. Point-in-time recovery available on Enterprise. Backup integrity verified automatically on every run.
Uptime & Monitoring
99.9% uptime target with real-time infrastructure monitoring. Public status page at status.geomaster.uk. Incident notifications via email on Enterprise.
Access Controls
The Right People See the Right Data
Granular permissions built for multi-user drilling operations โ not bolted on as an afterthought.
Role-Based Permissions
Four built-in roles: Geoscientist, Directional Driller (DDO), Viewer, and Admin. Each role has a defined permission set. Admins can assign roles per-project.
Project-Level Data Isolation
Users only see projects they have been explicitly invited to. There is no cross-project data bleed. Project owners control who has access and at what role.
SSO Support
EnterpriseSAML 2.0 and OIDC-based single sign-on available on the Enterprise plan. Connect GeoMaster to your corporate identity provider.
Audit Logs
EnterpriseFull audit trail of all user actions โ logins, data access, project changes, and GeoEngine queries. Exportable on demand. Available on Enterprise.
GDPR & Compliance
Operating Under UK Law
GeoMaster is operated by Greenstone Energy Ltd, registered in England & Wales (Company No. 17151768). We act as data controller for account and billing data, and as data processor for well data, logs, and project files uploaded by users.
We comply fully with UK GDPR and, where applicable, EU GDPR. You have the right to access, correct, export, and delete your personal data at any time. Requests can be sent to our Data Protection Officer.
Our legal bases for processing are: contractual necessity (account management, service delivery), legitimate interests (security monitoring, fraud prevention), and your consent (marketing communications).
Security questions
Straightforward answers โ no hedging.
Questions About Security? Talk to Us.
Our team includes petroleum engineers and infrastructure specialists. If you have specific security requirements, we'll walk you through our architecture.