How We Protect Your Data
Security built into every layer of our architecture.
Encryption Architecture
All data at rest is encrypted using AES-256-GCM with unique per-user encryption keys managed by our KMS (Key Management Service). Encryption keys are rotated quarterly and never stored alongside encrypted data.
Zero-Retention API Policy
When you generate prompts via API, the raw inputs are processed in isolated ephemeral execution environments and are permanently deleted from memory and all logging systems immediately after the response is delivered. We do not log, store, or analyze raw API prompt content.
Infrastructure Security
Our infrastructure runs exclusively on SOC 2 Type II certified cloud providers. All servers run hardened OS images with automatic security patching, network segmentation, and comprehensive intrusion detection.
Access Control
Internal access to production systems follows strict least-privilege principles. All access is logged, reviewed quarterly, and requires hardware 2FA. We use a zero-trust network model — no implicit trust within the perimeter.