Security & Compliance Overview
Neural Inverse is AI-native software development for regulated industries. Neural Inverse Cloud, the control plane behind the apps, enforces policy, approvals, data protection and an audit trail. This page describes how the platform is built. It is pre-release and runs on stage, not in production.
What the platform enforces today
- Server-side enforcement. Every decision is made and enforced on the server. The console and apps only display it.
- Fail closed. A missing key, setting or audit record refuses the action instead of allowing it.
- Tamper-evident audit trail. Hash-chained, with the real client IP, kept in the same transaction as the change.
- Least privilege. API keys never exceed their owner's current permissions. A removed owner's keys stop working.
- Sessions that end on time. Idle and maximum lifetimes are enforced, and every end is recorded with a reason.
- Two-person control. The most sensitive operator actions need a second person and a fresh MFA check. Organization policy changes need two approvals and can be rolled back.
- Data protection. Data loss prevention on prompts and payloads. Secrets are write-only after they are saved.
- Region-locked data. Resources stay in the region where they are created, and organization policies can restrict regions.
- No customer secrets for bring-your-own-cloud. AWS uses a role with an external ID. Azure and Google Cloud use workload identity federation.
Certifications and compliance
We do not currently hold SOC 2, ISO 27001, HIPAA, FedRAMP or any other certification or attestation. We do not publish uptime figures, and SLAs apply only once a paid plan is live.
For regulated toolchains, Neural Inverse is built to support IEC 62304, ISO 26262 and DO-178C processes. It is not qualified for them.
Data regions and deployment
Accounts and sign-in are global. Resources live in the region where they are created. See Data regions. Dedicated and self-hosted deployments, including air-gapped, can keep identity and data in a single jurisdiction.
Source availability
The apps are source-available under the Business Source License 1.1. Code inherited from Code - OSS stays MIT. Neural Inverse Cloud is proprietary. Neural Inverse is not affiliated with or endorsed by Microsoft. Visual Studio Code is a trademark of Microsoft Corporation.
Reporting
Contact
- Security inquiries: security@neuralinverse.com
- Privacy inquiries: privacy@neuralinverse.com
Last edited