Clear about what is ready.
Enterprise reviews should begin with the capabilities that exist today, not a wall of future certification logos. This page separates available controls, contract-specific commitments, and roadmap work.
This is a product capability statement, not an independent certification or audit report.
| Capability | Status | What that means |
|---|---|---|
| Organization and project separation | Available | Separate production workloads, teams, and usage views within an enterprise account. |
| Role-based access | Available | Control who can manage projects, deployments, keys, and usage. |
| Scoped API keys and limits | Available | Issue keys by project and apply customer-specific request and token limits. |
| Managed dedicated capacity | Available | Reserved deployments are sized and operated for qualified enterprise workloads. |
| Customer-provided tuned weights | Design partner | Compatible checkpoints can enter a benchmark and deployment review. |
| SSO and lifecycle provisioning | Contractual | Confirm identity-provider requirements and rollout scope in the enterprise agreement. |
| Regional residency and sovereign operation | Roadmap | No residency or sovereign guarantee is presented as generally available today. |
| Zero-retention guarantee | Roadmap | Retention commitments are not represented as a generally available product control today. |
| Audit export and SIEM integrations | Roadmap | Detailed deployment events and external security exports remain planned. |
| Encryption and confidential compute | Roadmap | Encrypted inference and attested GPU execution are not available today. |
| SOC 2, ISO 27001, HIPAA and compliance packs | Roadmap | No certification is claimed until an independent audit or executed program exists. |
Encryption status
Encrypted inference is not currently available.
Encryption enhancements and confidential GPU execution are roadmap items. We will not describe inference as encrypted or confidential until the design, operational controls, and evidence are ready for customer review.
Security FAQ
Is llmcloud certified today?+
No certification is claimed on this page. SOC 2, ISO 27001, HIPAA readiness, and related compliance programs remain roadmap work until independently verified.
Is encrypted inference available?+
No. Encryption enhancements and confidential GPU execution remain roadmap capabilities.
Which controls can we evaluate today?+
Organization and project separation, role-based access, scoped API keys, customer limits, and managed dedicated capacity. Contract-specific identity requirements are reviewed during enterprise scoping.
How do we begin a security review?+
Start with a workload benchmark. It establishes the model and deployment boundary first, after which the technical owner can answer the controls that apply to that exact deployment.