Security Policies

At Tensorlake, we take data security and privacy extremely seriously. We serve customers across healthcare, financial services, legal, and government sectors who entrust us with high-stakes personally identifiable information (PII) and mission-critical data. We understand that protecting this sensitive information isn’t just important. It’s essential to our customers’ operations and regulatory compliance. We have implemented robust, enterprise-grade security measures to ensure the highest level of protection. This page outlines our certifications, data storage practices, encryption protocols, and subprocessors.

​

Certifications

Tensorlake is SOC 2 Type 2 certified. The report, along with our current security controls and policies, is available on the Tensorlake Trust Center. Request access there to receive the full report. For security questionnaires or a vendor review, contact support@tensorlake.ai.

​

Data Storage

The data that may be stored on Tensorlake includes the files and state inside your sandboxes, snapshots, and the inputs and outputs of your workflows. Below are the default policies around data storage.

1. Sandbox data: Files, filesystem changes, and snapshots created inside your sandboxes are stored in accordance with our data storage policy below.
2. Workflow data: The inputs and outputs of your workflow runs are stored in accordance with our data storage policy below.

​

Storage Policies

1. Storage Location: We utilize Amazon Web Services (AWS) S3 for storing data. Data is encrypted at rest and in transit.
2. Access Permissions: Access to AWS S3 storage is strictly limited to the internal services that operate on your behalf. This ensures that only authorized and authenticated processes can interact with the stored data, minimizing the risk of unauthorized access.
3. Data Retention: For all users, you can delete your data from our servers at any time using our APIs.
4. Data Usage: For all users, we never use any of your data for training purposes. Tensorlake does not use machine learning models to process your data and does not send your data to third-party model providers. We respect the privacy of our customers and ensure only they have access to the data from their requests.

​

Retention Period

The Data Processing Addendum, Annex I, states the retention commitment as follows:

Personal Data contained in content submitted to the Services is retained for the duration of the Agreement and is deleted when Customer deletes it. Customer may delete submitted content, workflow inputs and outputs, and sandbox files and state at any time through the Services’ APIs; upon such a request the data is removed from Tensorlake’s active systems immediately and cannot be recovered. Tensorlake does not apply a fixed retention period to submitted content and does not retain it beyond what is necessary to provide the Services. Account and contact information of Customer’s authorized users is retained for the duration of the Agreement and thereafter only as required for Tensorlake’s legal, accounting and security obligations. On termination or expiry of the Agreement, Personal Data is returned or deleted in accordance with Section 3.1(e) of this DPA, including copies held in backups, within ninety (90) days.

​

Deleting Your Data

While your data is stored securely in accordance with our storage policies outlined above, we understand that you may want to remove specific data at any time. If you need to request complete data deletion and/or access audit logs from Tensorlake, please contact us at support@tensorlake.ai .

1. Sandbox Deletion: When you delete a sandbox, its files and state are permanently removed from our storage and cannot be recovered. Snapshots you created are retained until you delete them.
2. Workflow Data Deletion: You can delete the inputs and outputs associated with your workflow runs. Once deleted, the data is permanently removed and cannot be recovered.
3. Immediate Deletion: When you request deletion, the data is immediately removed from our active systems. This ensures that you maintain full control over your data lifecycle.
4. API Access: Data deletion can be performed through our API endpoints, allowing you to integrate data management into your workflows and compliance processes.

Whether you need to comply with data retention policies, respond to data subject requests, or simply manage your storage usage, you have the tools to delete your data whenever needed.

​

Encryption

1. Encryption at Rest: All data stored in AWS S3 is encrypted at rest using industry-standard encryption algorithms. This means that even if unauthorized individuals were to gain access to the stored data, they would not be able to decipher it without the proper encryption keys.
2. Encryption in Transit: We employ encryption protocols to protect data in transit. All communication between our systems and the data storage is conducted over secure channels using encryption mechanisms such as SSL/TLS. This ensures that data remains confidential and tamper-proof during transmission.

​

Subprocessors

Tensorlake’s current Subprocessors are listed on the Tensorlake Trust Center. That list is the authoritative one and constitutes Annex III to the Standard Contractual Clauses under the Data Processing Addendum. Request access on the Trust Center to view it and to subscribe to notifications of new Subprocessors. If you have any further questions or require additional information regarding our security practices, please don’t hesitate to reach out to support@tensorlake.ai.