Export control & defence trade
Autonomy and unmanned systems technology is subject to export-control regimes. We assess what may be shared, with whom, and under what authorisation before sharing it.
Company · Security & Compliance
Security and
compliance.
Working in defence carries obligations that go well beyond good engineering practice. How we handle information, who we work with, and what we are permitted to share are governed by law and by our own standards — and we take both seriously from the outset rather than retrofitting them later.
Our Position
Built in from
the start.
It is common for early-stage companies to treat security and compliance as something to formalise once they are larger. In defence that is the wrong order. The obligations attach to the work itself, not to the size of the company doing it, and habits formed early are the ones that persist.
We are an R&D-stage company and we are candid about what that means: our programme is proportionate to our size and maturing as we grow. What follows describes how we operate today and the direction we are building toward, not a claim to certifications we do not yet hold.
Information Security
Protecting what
we hold.
Most of what matters in an autonomy company is information: source code, models, test data, and whatever partners entrust to us. Protecting it is a first-order concern.
- Least privilegeAccess to systems and data is granted on need, reviewed, and removed when no longer required.
- SegregationPartner and programme material is kept separate, and handled according to whatever terms it arrived under.
- Secure developmentSecurity considered as part of engineering — dependencies, secrets handling, code review and change control.
- Incident readinessA defined route for identifying, containing and reporting a security incident.
Information SecurityPractice
PrincipleLeast privilege, by default
Partner materialSegregated and handled per terms
DevelopmentSecurity reviewed as part of engineering
Disclosuresecurity@rewinddynamics.com
MaturityProportionate and growing
Regulatory
Obligations
we work within.
Defence technology is regulated, and rightly so. These are the areas that govern what we can build, share and export.
Sanctions & screening
We screen counterparties and will not work with entities subject to applicable restrictions.
End-use and end-user
We care who ultimately uses what we build, and we ask. Our responsible autonomy commitments are part of that assessment.
Data protection
Personal information submitted through this site is handled as set out in our privacy notice.
Contractual confidentiality
Programme and partner information is handled strictly under the terms it was shared with us.
Anti-bribery & conduct
We compete on the merits of the engineering. Nothing else is acceptable.
Working With Us
What this means
in practice.
01
Nothing sensitive by web form
Please do not send classified, export-controlled or otherwise sensitive material through this website or unsecured email.
02
We arrange the channel
Tell us you have something to discuss and we will set up an appropriate route for it.
03
We say no when required
If a request falls outside what we may lawfully or responsibly do, we will say so plainly.
04
Human command is a red line
Our systems are built so a person remains in command. That is not a term we negotiate.
Responsible disclosure. If you believe you have found a security vulnerability affecting Rewind Dynamics, please contact security@rewinddynamics.com with enough detail to reproduce it. Please give us a reasonable opportunity to investigate and remediate before disclosing publicly. We will acknowledge reports and keep you informed. This page describes our approach and is not a warranty or a statement of certification.
Questions
Need to discuss
compliance?
If you have a compliance, security or export-control question about working with us, contact us and we'll route it properly.