How your servers are protected, and what we cannot show you yet.
This page is for the IT or risk lead who has to approve us. It describes what is true of every Sovrakeep deployment, the standard every facility must meet, and where we are still building our own assurance. Send your questionnaire to hello@sovrakeep.com with "Security review" in the subject line; we acknowledge it in one business day and complete it within five.
The short version
- Single tenant. Your servers are used by your organization alone. Nothing is shared with another customer.
- Your keys. Storage on your servers is encrypted at rest with keys your organization controls.
- Administered from Canada, by Sovrakeep and a Canadian operations partner under contract, only as your agreement allows, and every administrative session is logged.
- A facility that meets a written standard, named in your term summary.
- Verified hardware. Every server arrives with its sourcing record and an independent benchmark.
- Drives never leave unwiped. At exit, or when a part fails, drives are wiped with a certificate, or you keep them.
- No certification of our own yet. We are preparing for a SOC 2 Type II examination of Sovrakeep's own controls. Until it is done we say so plainly.
Your servers
| Area | What we do |
|---|---|
| Isolation | Dedicated physical servers for one organization. Model weights, prompts, documents and logs stay on hardware no other customer touches. |
| Encryption and keys | Storage encrypted at rest, with keys your organization controls. Access to the servers is over encrypted connections your IT team approves. |
| Administrative access | Held in Canada by Sovrakeep and our operations partner, limited to hardware and the base software we maintain, and only as your agreement allows. Every administrative session is logged and the log is available to you. |
| Physical access | Facility staff work on your servers only for hardware tasks, under the facility's access controls. |
| Software | Open-weight models your security team approves. We install and patch the base software (the private API and the web chat interface) and schedule updates with you. |
| Failed parts | A failed drive is wiped before it leaves the facility, with a certificate, or it stays with you. Replacement units are verified before they go into service. |
| End of term | If the servers leave your service, drives are wiped with a certificate or handed to you, your choice. |
Hardware provenance
Every server is sourced on the institutional secondary market and accepted only after an independent benchmark, a burn-in run and a firmware check. Each one carries a record: where it came from, its serial numbers, its test results and its service history while in your service. The record is yours to keep.
The facility: our minimum standard
Your servers are racked in a facility that meets every line below. The facility is named in your term summary, and its attestation report is available to you under a non-disclosure agreement. If you prefer, the colocation contract can be in your own name.
| Requirement | Standard |
|---|---|
| Ownership | Canadian-owned, checked against corporate filings |
| Location | In Canada; the province is in your term summary |
| Physical security | Staffed around the clock, logged access control, video surveillance, escorted visitors |
| Resilience | Redundant power and cooling, to a Tier III-equivalent design or better |
| Independent attestation | A current SOC 2 Type II report or ISO/IEC 27001 certificate for the facility |
Sovrakeep's own controls
Sovrakeep is a new company. We do not yet hold a SOC 2 report or an ISO/IEC 27001 certificate of our own. We are preparing for a SOC 2 Type II examination of Sovrakeep's own controls and will publish the audit period on this page when it is set. Until then, your review rests on our answers to your questionnaire, our written procedures, and the reports of the facility and our operations partner.
Incidents
If an incident affects your servers or your data, we tell you as soon as it is confirmed and give you what we know in writing. The notification window is written into your agreement. Personal information breaches are handled as the law requires; see the privacy policy.
This website
This website and its request form are separate from customer servers and never touch customer data. They currently run on service providers in the United States, which the privacy policy lists. The site sets no cookies, loads nothing from third parties, and is served only over encrypted connections with a strict content security policy.