Enterprise-Grade Security

Security & Compliance

Your data security is our top priority. ViewLayer is built from the ground up with enterprise security requirements in mind.

We never store your AI prompts or outputs

ViewLayer only collects metadata and usage metrics — token counts, costs, timestamps, and model identifiers. Your actual AI conversations and generated content never touch our servers.

Certifications & Compliance

SOC 2 Type II

In Progress

Comprehensive audit of security controls, availability, and confidentiality. Expected completion: Q2 2026.

GDPR Compliant

Certified

Full compliance with European data protection regulations, including data subject rights and processing agreements.

Security Architecture

Data Encryption

At RestAES-256 encryption
In TransitTLS 1.3
Key ManagementAWS KMS with automatic rotation

Data Residency

United Statesus-east-1, us-west-2
European Unioneu-west-1, eu-central-1
Asia Pacificap-southeast-1

Access Controls

AuthenticationSSO (SAML 2.0, OIDC)
AuthorizationRole-Based Access Control (RBAC)
MFATOTP, WebAuthn, SMS

Data Retention

Default90 days
Configurable30, 60, or 90 day policies
DeletionAutomatic purge with audit trail

Audit Logging

CoverageAll administrative actions logged
ExportCSV, JSON, SIEM integration
Retention1 year minimum

Infrastructure

HostingAWS with multi-AZ deployment
DDoS ProtectionAWS Shield + CloudFront
Monitoring24/7 with automated alerting

Questions about security?

Our security team is available to discuss your requirements, review our practices, and provide additional documentation.

Contact Security Teamsecurity@ViewLayer.ai