Trust Center
At Graphwise, trust is at the core of everything we do. We are committed to maintaining the highest standards of information security, privacy, and quality in our services.
Our Commitment to Security and Privacy
Graphwise implements a robust Information Security, Privacy, and AI Management System (ISMS, PIMS, AIMS) designed to protect your data and ensure the confidentiality, integrity, and availability of our services. Our systems are built upon industry best practices and continuously reviewed and improved.
Sensiba LLP
CIS
Secmentis
- How are access controls (RBAC/ABAC) maintained across the semantic knowledge graph?
- Is customer data used to train public or foundational LLM models?
- How does Graphwise comply with the EU AI Act and global Responsible AI standards?
- How is customer data protected in transit and at rest?
- How does Graphwise prevent LLM hallucinations and ensure factual accuracy?
Trust Center Updates
PHP Remote Code Execution PHP2Shell CVE-2026-109618 & CVE-2026-109619 and Graphwise Platform Status
Dear Recipient,
We are reaching out to provide transparent updates regarding the recently disclosed global PHP vulnerability and its impact on Graphwise.
Status Overview
- Graphwise Platform: Fully Secure. The core Graphwise platform is built entirely on Java technology and is not affected by this vulnerability.
- Business Operations: Uninterrupted. There is no impact on service delivery, business continuity, or the availability of your customer-facing services.
Incident & Response Details
Upon disclosure of the global PHP vulnerability, Graphwise took immediate action to protect our infrastructure:
- Isolation: A small number of non-critical PHP-based servers (hosting our company website and select demo applications) were taken offline immediately as a precaution.
- Investigation & Remediation: Forensic investigations were conducted, and security patches were successfully applied to resolve the vulnerability.
- Current Findings: To date, our investigations have detected no security breaches or unauthorized access to our systems.
Ongoing Security Measures
The necessary patches have been fully deployed, and our Security Operations Center (SOC) continues active monitoring via SIEM tools to ensure complete environment integrity.
If you have any questions or require additional security information, please do not hesitate to reach out to our support team.
Questions
Whether your organization is affected by this vulnerability?
Yes. The vulnerability impacted a limited number of our internal servers running affected versions of PHP.
Which systems or services may be impacted?
This issue was strictly limited to internal systems. The products and services provided to you do not rely on PHP and were completely unaffected.
Whether any mitigation measures have already been implemented or are planned?
As an immediate mitigation measure, all systems running PHP were identified following the disclosure. Available patches were applied right away, while any unpatched servers were taken offline as a precaution. Once the relevant patches were released and applied, those systems were restored. All affected systems where the patches are available are now patched. The remaining systems need individual approach and will be brought online once work on them is complete.
Whether you currently anticipate any impact on service delivery or business continuity?
We do not anticipate any impact on service delivery or business continuity, and our services to you have remained fully operational throughout.