Security

Tenant isolation

Each tenant runs in isolated compute with dedicated, encrypted weight storage. Prompt data is never shared across tenants.

Encryption

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Customer-managed keys are available on Enterprise.

Residency

Pin vectors, objects, and lineage to chosen regions to meet GDPR, LGPD, or HIPAA constraints.

Compliance

SOC 2 Type II in progress; HIPAA BAA available on Enterprise. Contact security@cyata.cloud for the latest.

Reporting

Report vulnerabilities to security@cyata.cloud. We operate a coordinated disclosure program.