Trust Center
Security, privacy, and compliance are built directly into the Metriota Gateway architecture.
SOC 2 Type II
Our enterprise managed infrastructure is regularly audited to ensure rigorous security, availability, and confidentiality standards.
HIPAA Ready
Zero-trust PII vaulting ensures PHI is tokenized locally before routing. Business Associate Agreements (BAAs) are available for Enterprise tiers.
GDPR Compliance
Metriota empowers you to meet data residency requirements by intercepting and localizing European citizen data before it reaches US-based models.
Security Principles
- No Persistent Logs by Default: Unless explicitly configured for audit trials, prompt text is never stored to disk.
- Ephemeral Vaulting: Redis PII token maps use strict TTLs (Time-To-Live) to automatically purge sensitive data.
- Vulnerability Scanning: Container images are scanned daily against the latest CVE databases.
- Report an Issue: We offer a bug bounty for valid security flaws. Contact security@metriota.com.