Security Policy

Prism processes API inputs and outputs only to complete inference requests. We do not retain API content in persistent storage, application logs, analytics, or backups, and we do not use it to train, evaluate, or improve models.

We retain limited non-content service metadata for authentication, metering, billing, rate limiting, security, and reliability. Our Privacy Policy describes the data we collect and how we handle it.

Read our Privacy Policy

We use access controls to limit access to our systems and encrypt data in transit. Customers authenticate API requests with API keys and are responsible for keeping their keys private and rotating exposed credentials.

We use third-party infrastructure to operate our service, including hosting and model inference. Our zero-data-retention commitment applies to API inputs and outputs processed through Prism. See our Privacy Policy for how we share other information with service providers.