Control evidence
SOC 2
Review access boundaries, deletion behaviour, and available audit records against your control requirements.
No SOC 2 report claimed
Review controlsSecurity and compliance readiness
Keep memory scoped, decisions reviewable, and people in control. Bring documented controls to your next security review.
Request a security reviewBring your compliance requirements. Start with the controls and evidence behind your agent memory.
Control evidence
Review access boundaries, deletion behaviour, and available audit records against your control requirements.
No SOC 2 report claimed
Review controlsSecurity management review
Use documented technical controls and contractual commitments in your information security assessment.
No ISO 27001 certification claimed
Discuss your requirementsPrivacy and data handling
Inspect scoped access, deletion, processing terms, and subprocessors for your data protection review.
Compliance depends on your use
Read the DPADeployment assessment
Discuss jurisdictional configuration and the wider service boundary before planning federal workloads.
No FedRAMP status claimed
Review placement limitsControls and documentation are not certification. No independent attestation or FedRAMP Ready designation is implied. Any certified scope must be confirmed in writing.
Isolated Nuclei and validated Scopes define the memory boundary. Persisted permissions and explicit deny rules filter the context an agent can receive.
Consequence workflows keep scenarios, decisions, and approvals structured and reviewable. High-risk execution requires recorded human approval.
Tombstones and scope-version checks keep deleted memory out of recall, context caches, queues, and archive workflows.
Choose global, regional, or supported jurisdictional profiles. Regional preferences are best-effort; regulated deployments require configuration and contractual review.
Customer memory is not used to train models without separate, explicit written opt-in consent. Your application keeps control of model-provider credentials and downstream calls.
Documented controls, available audit exports, and retention options support security review. Enterprise controls depend on your plan, configuration, and contract.
Use invented records to verify positive recall, requested Scope filtering, tombstones and fresh context after deletion. Review the separate evidence for queue, archive, cache and compaction paths before relying on a production configuration.
Default placement for globally distributed products and general agent workloads.
Optimised for broad availability and low-friction integration.
Best-effort placement preferences for broad regions such as North America, Europe, or Asia-Pacific.
A latency and operational preference, not a standalone legal residency commitment.
Supported profiles for regulated Enterprise deployments with stricter review paths.
EU and FedRAMP-oriented review is subject to contract and configuration.
Regional preferences are not legal residency guarantees. Regulated use requires configuration and contractual review.
Review controls, deployment scope, and contractual commitments with the Neutron AI team.
Request a security review