Security and trust
Your knowledge is your advantage. We keep it yours.
The promises we make for your most sensitive data, and the controls that keep them.
Our promises
-
We don’t train on business or API data
Not on business plans, not through the API. Not your prompts, files or outputs.
-
You own what you make
Outputs belong to you. Models trained with Micius Ink belong to you.
-
You choose where it lives
Our cloud in mainland China, your private cloud, or your own servers.
-
You can see and delete it
Admins control retention, export audit logs and delete data at any time.
Controls
Defence in depth, documented.
-
Encryption
TLS 1.2+ in transit, AES-256 at rest, customer-managed keys on Enterprise.
-
Identity
SAML and OIDC single sign-on, SCIM, role-based access, enforced MFA.
-
Agent permissions
Read-only by default; every write action requires approval and is logged.
-
Isolation
Tenant isolation; dedicated capacity and private networking on request.
-
Testing
Annual third-party penetration tests and a public vulnerability disclosure programme.
-
Incident response
24/7 on-call security team and customer notification commitments.
Controls to be confirmed with the security team
Certifications
Independent audits.
- ISO/IEC 27001
- ISO/IEC 27701
- MLPS Level 3 (等保三级)
- SOC 2 Type II
Questions
Which laws do you comply with?
How do I report a vulnerability?
Can we review your security documentation?
Talk to our security team.
Try it in the app, build with the API, or run it in your own environment.