SECURITY & TRUST

Built for the controls a regulated fund requires.

InferEdge is designed for buy-side environments where audit, isolation, and data handling aren't optional — they're the default.

SOC 2 Type II

Annual audit, continuous monitoring

ISO 27001

Certified. Certificate on request.

Annual pen-test and audit

Reports available on request

Compliant with Local Laws

In US, Singapore and India

Controls

How your data is handled.

Data isolation, encryption, and access are engineered in — not bolted on.

Data isolation

Enterprise deployments run in your VPC. Data never leaves your perimeter and never trains a shared model.

Encryption

AES-256 at rest, TLS 1.3 in transit, and customer-managed keys (BYOK) for VPC deployments.

Retention controls

Configurable retention per data class. Right-to-delete honored across every cache, log, and eval trace.

Full audit log

Every prompt, tool call, response and human action is logged and exportable to your SIEM.

SSO & RBAC

Okta, Microsoft Entra ID and Google Workspace. Role-based access down to individual workflows and data classes.

Your region, your model

Hosted in your VPC, so data stays in the region you run it in. Bring your own model provider, with zero retention on every call.

Agent Safety

Agents add risks that standard controls don't cover. These controls address them.

Sandboxed output

Generated dashboards run in a sandbox with no direct network access. Credentials never reach them.

Viewer permissions

Every data request runs under the viewer's own identity and entitlements, including for shared dashboards.

Confirmed writes

Reads are the default. Any write needs a separate confirmation and is never retried automatically.

Versioned and replayable

Every published version keeps its source. Every run is logged with its query and access context.

Security package on request.

SOC 2 report, pen-test summary, security questionnaire responses, and architecture diagrams — available on request.