Trust
Security
How we protect your code, your prompts, and your team.
Encryption
TLS 1.3 in transit. AES-256-GCM at rest. Customer-managed KMS keys on Enterprise.
Isolation
Each tenant lives in a logically isolated namespace. Enterprise customers may run the inference plane in their own VPC.
Zero retention by default
On Free and Pro, prompts and completions are dropped after the request finishes. Audit logs include only metadata.
Compliance
- SOC 2 Type II — in flight (Q3 2026)
- GDPR / UK GDPR / CCPA — DPA available
- HIPAA BAA — on request for Enterprise
Disclosure
Report a vulnerability to security@goatfied.com. PGP key available on request. We acknowledge within 24h.
Status
Live availability and incidents: status.goatfied.com.