Security & Compliance

Last updated September 17, 2026

Security controls across the Lingyuns gateway, GPU cloud and platform.

Encryption

TLS 1.2+ on every endpoint, HSTS enabled. Instance disks are encrypted at rest; scratch NVMe is wiped between tenancies.

API keys

Keys are stored only as SHA-256 hashes — we cannot recover them. Rotation and revocation are self-service, effective immediately across all edge nodes.

Isolation

GPU instances run in dedicated KVM guests with SR-IOV networking. No shared memory between tenants. Cluster fabric is VLAN-isolated per customer.

Data handling

Zero-retention mode for gateway requests; request bodies are not logged. Metadata retention is 90 days. Customer data is stored in US regions.

Access control

Internal access follows least privilege with hardware-key MFA. Production changes are peer-reviewed and audited.

Reporting

Report vulnerabilities to [email protected] — we acknowledge within one business day and coordinate disclosure.