Infrastructure isolation
Customer networks are isolated at the virtual switch and firewall layers. GPU devices are dedicated for the term. Local NVMe is encrypted and erased when an instance is released.
Account security
Passwords are stored as slow salted hashes. Session and API secrets are stored only as hashes, recovery codes are shown once, and SSH private keys are never accepted. Financial and resource-changing requests use idempotency keys.
Payment integrity
A blockchain payment is identified by its network transaction and output or log index, not only by a provider event ID. Database uniqueness rules prevent the same transfer from being credited twice.
Reporting
A monitored disclosure channel, acknowledgement target, ownership path, retention rule, and coordinated-disclosure process must be verified before production launch. No monitored security mailbox is currently published.
Pending approval. These policies are drafts, not active service commitments. Company identity, jurisdiction, address, service providers, and legal review must be completed before orders open.