How we protect your data
condense is a context-compression proxy for LLM workloads. Conversations, prompts, and compressed context flow through our infrastructure, so security and privacy are not features, they are the product. Here is how we protect your data, and where we stand on the compliance regimes that matter.
Keeping your data secure
For developers
Your keys and traffic, protected by default.
- Your upstream provider key is never stored, only a sha256 fingerprint in the usage ledger.
- Traffic is encrypted in transit with TLS 1.2+ and at rest with AES-256.
- We never train on your data.
- Content is deleted on a 7-day window, with zero data retention (ZDR) available on request.
- SSO and 2FA protect your account.
For teams
Layered controls for organizations.
- EU data residency, all customer data is stored and processed in the EU.
- Every privileged action is written to an append-only, tamper-evident audit trail.
- GDPR compliant, with data export and erasure honored.
- SOC 2 Type II is in progress.
- Staging and production run in fully separated networks.
Security at every step
Defense in depth
TLS 1.2+ everywhere with HSTS, AES-256 at rest with keys in AWS KMS, non-root hardened containers, and version-controlled deploys that are always reviewed before release.
Data & privacy
We never train on your data, your upstream key is never stored, and content is deleted on a 7-day window, with zero data retention available on request. All storage and processing stays in the EU.
Compliance
GDPR compliant with EU data residency, and SOC 2 Type II in progress. Every privileged action lands in an append-only, tamper-evident audit trail.
Reporting an issue
Found a vulnerability? We welcome good-faith disclosure. Email team@condense.chat and we will respond quickly.
Where we stand on compliance
condense is built and hosted in the EU: all customer data is stored and processed within the EU, and we support GDPR obligations including data export and erasure. SOC 2 Type II is in progress. We are happy to walk a security or procurement team through our controls, just reach out.