Security
How we hold your stuff
Plain English, no legal cosplay. If something below is unclear, ask us.
BYOK
Your model keys, never ours
AES-256
Data at rest
TLS 1.3
In transit
Your keys stay yours
BYOK by default. We never see or store your model provider keys — they live encrypted in your account and are used to call the model directly.
Data locality
India edition data is stored in an Indian region. When we open country sisters, each edition keeps its data in-region.
Encryption
TLS 1.3 in transit. AES-256 at rest. Per-tenant keys managed via envelope encryption.
Access control
Every plugin can be scoped per-role. Audit logs are on by default and exportable.
Backups
Nightly encrypted snapshots to your own S3, R2, or Backblaze bucket. One-click restore.
Responsible disclosure
Found something? Email [email protected] — we reply within 48 hours.
Have a compliance question we didn’t cover? Talk to us.