{
  "product": "Amnetic cleanrooms",
  "human_readable": "https://amnetic.ai/security.html",
  "updated": "2026-10-08",
  "data_location": {
    "storage": {
      "provider": "AWS",
      "region": "us-west-2",
      "account": "Amnetic's own AWS account",
      "object_keys": "random; file names are kept in the database, not the bucket"
    },
    "processing": {
      "sandbox_provider": "E2B",
      "sandbox": "fresh, single-use virtual machine per run; files are loaded into it for the duration of the run",
      "model_inference": "Anthropic Claude on Amazon Bedrock, AWS US regions"
    }
  },
  "encryption": {
    "at_rest": "AES-256 server-side encryption on the storage bucket; encrypted database storage; AWS-managed keys",
    "in_transit": "TLS 1.2 or newer",
    "customer_managed_keys": false
  },
  "guarantees": [
    {
      "id": "members-cannot-download",
      "statement": "Members can't download your files.",
      "enforced_by": "File access is owner-only. The only path from your data to a member is a run you approved and a report you released."
    },
    {
      "id": "agent-cannot-reach-outside",
      "statement": "Agent code can't connect to outside services.",
      "enforced_by": "The agent process has no network at all; and at the VM boundary, the sandbox provider blocks every outbound connection except to Amnetic's own services and storage, plus a public DNS resolver."
    },
    {
      "id": "runs-are-isolated",
      "statement": "A run can't reach another run's files, or another room's.",
      "enforced_by": "Each run gets short-lived credentials scoped to that run and its pinned inputs, revoked when it ends, and the server refuses anything else."
    },
    {
      "id": "release-requires-owner",
      "statement": "No report reaches a member without your approval.",
      "enforced_by": "Reports are held until you release them. Nothing is shown before that."
    },
    {
      "id": "no-model-training",
      "statement": "Your data isn't used to train AI models, by us or by model companies.",
      "enforced_by": "Amnetic doesn't train on customer data, and models run on Amazon Bedrock under terms that bar the model company from receiving or training on it."
    }
  ],
  "outside_guarantees": [
    {
      "id": "approved-report-contents",
      "statement": "A report you approve that contains sensitive information.",
      "note": "Your review before release is the control."
    },
    {
      "id": "inference-from-released-reports",
      "statement": "What can be inferred from reports you release.",
      "note": "A legitimate answer still reveals something about the data."
    },
    {
      "id": "provider-compromise",
      "statement": "A compromise of the providers beneath us.",
      "note": "AWS and the sandbox provider are outside our control."
    }
  ],
  "model_handling": {
    "provider": "Amazon Bedrock",
    "models": "Anthropic Claude",
    "regions": "AWS US regions",
    "shared_with_model_company": false,
    "used_for_training_by_model_company": false,
    "used_for_training_by_amnetic": false,
    "prompts_logged_by_amnetic_gateway": false,
    "details": "https://amnetic.ai/privacy.html"
  },
  "what_leaves_the_room": {
    "outputs": [
      "text report released by the owner",
      "signed receipt describing the run (hashes, sizes, timing and cost)"
    ],
    "report_limits": {
      "max_bytes": 65536,
      "max_fenced_code_bytes": 16384,
      "long_encoded_blobs": "rejected"
    },
    "files_delivered_to_members": false
  },
  "staff_access": {
    "technically_possible": true,
    "feature_exposing_files_to_staff": false,
    "database_access": "break-glass session, recorded and kept for a year",
    "bucket_reads": "logged by AWS CloudTrail and kept for a year"
  },
  "deletion": {
    "member_access": "ends immediately",
    "files": "every stored version deleted from the bucket by a background job",
    "database": "room title, requests and reports scrubbed; file names replaced with hashes",
    "completion": "signed event",
    "retained": [
      "runs already released to members (request and report)"
    ],
    "backups_expire_days": 35,
    "application_logs_expire_days": 90,
    "account_closure": "wipes every room the account owns"
  },
  "logging": {
    "recorded": [
      "membership changes",
      "access grants and revocations",
      "requests and decisions",
      "files an agent read",
      "wipes"
    ],
    "contains_file_contents_prompts_or_reports": false,
    "website_analytics": "first-party, cookieless"
  },
  "contact": "mailto:harrison@amnetic.ai"
}