Security that passes your review.
Not just ours. Isolation, encryption and audit trails are on by default, on every plan.
Six controls, on by default.
What every workload on Lattis gets, from the free tier to Enterprise.
Isolation
Every agent run in its own container. No shared memory between tenants.
Data residency
Per-key region pinning across 11 regions.
Encryption
TLS 1.3 in transit, AES-256 at rest, customer-managed keys on Enterprise.
Access
SSO, SCIM, role-based permissions and a full audit log.
Retention
Traces kept 30 days by default, configurable down to zero.
Disclosure
security@lattis.dev, with a 72-hour response.
Where your data goes
SOC 2 report, pen test summary and our DPA, in one email.
Sent within one business day. We may ask you to sign an NDA first.
Security, answered.
Your security team can talk to ours directly.
Do you train models on our data?
No. Prompts, outputs and traces are never used to train any model, ours or a provider's.
Where is our data stored?
In the region you pin each API key to, one of 11. Requests, traces and logs stay in that region and are never copied out for analytics or support.
Can we sign a DPA or a BAA?
Yes. Our DPA comes with the security packet. A BAA is available on Enterprise for teams that handle protected health information.
How do we report a vulnerability?
Email security@lattis.dev with the details and steps to reproduce. We reply within 72 hours and credit researchers who disclose responsibly.