01
Encryption in Transit
All data in transit is encrypted using TLS 1.3. No exceptions. This includes browser connections, API calls, and internal service communication.
← Security
SECURITY
Your data, encrypted and under your control — start to finish.
Because Calliope AI runs in your account, your code, queries, and analysis stay where they already live. Encrypted in transit and at rest, isolated, and yours to delete on your schedule — defense in depth across the full data lifecycle.
Data is the Asset
02
Encryption at Rest
All data at rest is encrypted using AES-256. This includes databases, file storage, backups, and logs. Encryption keys are managed securely.
03
Single-tenant by design
Your deployment runs in your own account — single-tenant, with no other tenant to be separated from. No shared databases, no shared storage, no data commingling. Your data lives inside your perimeter, not ours.
04
Secrets Management
API keys, database credentials, and other secrets are stored in dedicated secrets management systems. Never in code, never in plain text, never in logs.
05
Data Residency Options
Need data to stay in a specific region? We offer deployment options that keep your data where your compliance requirements demand.
06
Data Retention & Deletion
You control your data lifecycle. Delete your data when you choose. We don’t retain customer data beyond what’s needed for service operation.
