Audited at every plane.
Compliance is a primitive, not a checkbox. Pick your region. Read the DPA. Audit the trail.
posture = designed for / on the path · the rest are earned.
Where your data lives is your call.
Pick a region. We show you which datacenter hosts the infra, which sub-processors are involved, and which regulations apply.
- · Supabase EU
- · Groq EU egress
- · Vercel EU edge
EU prompts parsed in EU region. No US-region routing.
Want a region we don't list? Tell us where →
In plain English.
No fine print. No legal trapdoors. Five commitments anyone can read.
- ·We don't train on your prompts. Ever.
- ·We don't sell your data. We don't share with third parties for marketing.
- ·EU prompts never leave EU regions. US prompts stay in US regions. APAC pilot incoming.
- ·Zero-retention mode is available on the institutional tier — prompts never persist past the response.
- ·You can export and delete everything from your dashboard at any time.
Where AI lives — and where it doesn't.
- · Prompt parsing (Llama 3.3 70B via Groq)
- · Yield path discovery (Solver, coming)
- · Anomaly narration (Pulse, coming)
- · Audit trail summarization (Witness, coming)
- · Validators (Solana, Cosmos, Monad, +75)
- · RPC endpoints (deterministic by design)
- · Chainlink + Wormhole node operation
- · HSM key management
The split is deliberate. Institutions buy predictable. AI in the infra layer breaks that contract. Keeping AI strictly in the upper layer means the brain can be smart without the metal becoming unreliable.
Numbers, not adjectives.
Found something? Tell us first.
We follow coordinated disclosure. Email security@layerstack.tech with details. We acknowledge within 24h, fix within SLA, and credit you publicly with permission.
- · Bug bounty live for severity-graded reports.
- · Annual third-party pen test. Report under NDA.
- · Hall of fame for verified researchers.
The Trust Pack.
A signed bundle: SOC 2 letter (when ready), GDPR DPA template, sub-processor list, OFAC screening methodology, security whitepaper, AI privacy statement, breach notification SLA.
Corporate email required. Delivered to your inbox within an hour.