Security & trust
What security reviewers need to assess Aventail™: our SOC 2 Type II status, where data goes, how policy governs inference, and the documents behind it.
SOC 2 Type II
SOC 2 Type II
Aventail™ has achieved SOC 2 Type II.
Request the SOC 2 Type II report and supporting security information through our trust centre. Requests are reviewed there; access is not automatic.
Where your data goes
Inference routed through Aventail™ Link follows the destination your policy permits.
| Destination | What it receives |
|---|---|
| Local execution | With supported local execution, inference stays on the machine running Aventail™ Link. |
| Approved remote destination | A permitted peer, server or external provider receives the request sent to it. External providers process it through your organisation’s own account. |
| Hosted Aventail™ Control | Management, device and routing events, not prompt or response bodies. Aventail™ Control can also be hosted on your own infrastructure. |
Application storage, plugins and analytics are separate considerations. Review them alongside inference routing; this does not mean all data stays on the device.
How policy governs inference
Aventail™ Control configures and distributes policies ahead of requests. Aventail™ Link evaluates them locally for each request, covering approved models, destinations, geography and fallback. Hosted Aventail™ Control stays outside the inference request path.
If no destination is permitted, the request returns an error and no model runs it.
These restrictions apply to requests routed through Aventail™, not to unrelated tools.
Review the documents
- Trust centreSOC 2 Type II report requests and security information (opens in a new tab)
- Data Processing AgreementTerms for personal data we process for you
- Privacy PolicyHow we handle personal data
- Security documentationProduct security guidance (opens in a new tab)
- Platform architectureHow the components fit together (opens in a new tab)
Talk to us about a security review
Bring your questionnaire, deployment requirements and questions to a conversation with our team.