DocsSecurity & Compliance

SECURITY_&_COMPLIANCE

How AKIOS protects your data, ensures model safety, and helps you meet compliance requirements.

DATA_PRIVACY#

ZERO_RETENTION_POLICY

By default, the AKIOS control plane is pass-through. We do not store your prompts or completions unless you explicitly enable the Audit Log feature. Your data is encrypted in transit (TLS 1.3) and never used to train our models.

SECRET_MANAGEMENT#

ENCRYPTION_AT_REST

API keys (OpenAI, Anthropic) stored in AKIOS Cloud are encrypted using AES-256-GCM. Keys are decrypted only within the secure enclave of the runtime environment at the moment of execution.

BEST_PRACTICE

Rotate your keys regularly. Use the AKIOS secrets rotate command to update keys without downtime.

COMPLIANCE_GUARDRAILS#

AUTOMATED_POLICY_ENFORCEMENT

Enterprises can define global policies that apply to all agents in an organization.

PII_REDACTION

Automatically detect and mask credit cards, SSNs, and emails.

TOPIC_BLOCKING

Prevent agents from discussing competitors or political topics.

RATE_LIMITING

Prevent cost overruns and denial-of-service attacks.

AUDIT_TRAILS

Log every input/output pair with cryptographic signatures.

IMPLEMENTATION_EXAMPLE

typescript
import { Guardrails, DetectPII, BlockTopic } from '@AKIOS/security'

const rails = new Guardrails({
  input: [
    // Redact sensitive info before it hits the LLM
    DetectPII.configure({ types: ['email', 'phone', 'ssn'] }),
    // Block prompts that try to bypass rules
    BlockTopic.configure({ 
      topics: ['competitor_names', 'politics'], 
      sensitivity: 'high' 
    })
  ],
  output: [
    // Ensure the model doesn't leak internal IPs
    DetectPII.configure({ types: ['ip_address'] })
  ]
})

const agent = new Agent({
  name: 'secure-agent',
  guardrails: rails
})