Security
Your data stays yours.
Inferloom is built for teams that can't hand-wave what happens to their prompts. Here's the short version.
Encryption
TLS 1.3 in transit, AES-256 at rest, envelope encryption for stored credentials with per-workspace keys.
Data residency
US or EU regions. Pin a workspace to a region; traces and datasets never leave it.
No training on your data
Prompts, completions and datasets are never used to train foundation models.
Access control
SSO/SAML, SCIM, scoped API tokens, and per-environment service accounts with audit logs.
Compliance
SOC 2 Type II, GDPR-ready DPAs, subprocessor list maintained and versioned.
Isolation
Per-tenant execution sandboxes with egress controls for tool and MCP calls.
Vulnerability disclosure
Found something? Email security@inferloom.dev or read /.well-known/security.txt. We aim to acknowledge within 2 business days.