Security and Compliance
Datature Vi's security certifications, data protection practices, compliance programs, and infrastructure architecture.
Datature Vi is built for teams that work with sensitive visual data. This page covers the certifications, infrastructure decisions, and operational practices that protect your data on the platform.
Certifications
To request a copy of the SOC 2 report or to execute a BAA or DPA, contact [email protected].
Data residency
Datature Vi offers configurable data residency to meet geographic and regulatory requirements.
Multi-region (default): Data is distributed across multiple cloud regions for performance and availability. Datature selects the optimal region based on your location.
Single region: When you create a dataset, you can select a specific geographic region for storage. Data stays within that region for the dataset's lifetime. Available regions include US, EU, and Asia-Pacific locations. Choose single-region storage when data sovereignty or compliance policies (such as EU data residency rules) require data to stay within a specific jurisdiction.
On-premise and VPC deployment (Enterprise): Enterprise plan customers can deploy Datature Vi within their own VPC or on-premise infrastructure. Training and inference run inside your network boundary. Contact [email protected] for architecture details.
Encryption
Access controls
Datature Vi provides layered access controls at the organization and project levels.
Organization roles: Owner, Admin, and Member roles govern who can manage billing, invite users, and create resources. See Team Settings for role details.
Project-level roles: Each dataset and training project has its own Owner, Editor, and Viewer roles, so you can restrict who can modify annotations or training configurations. See Team Settings for per-project access patterns.
API secret keys: Keys are scoped to specific permissions (Dataset, Training, Deployment) and permission levels (Full, Read Only, Labeler Only, Restricted). Rotate keys on a regular schedule and use separate keys for development and production. See Secret Keys for best practices.
Governance templates: For an optional RACI-style checklist aligned to Datature Vi roles (labeling, export, keys, billing), see Roles and RACI checklist.
SSO and SAML: Available on the Enterprise plan. Integrate Datature Vi with your identity provider (Okta, Azure AD, Google Workspace, or any SAML 2.0 provider) for centralized authentication and automatic user provisioning. Contact [email protected] to configure SSO.
Infrastructure
Datature Vi runs on major cloud infrastructure with the following operational practices:
- Compute isolation: Training runs execute in isolated containers. GPU resources allocated to your training run are not shared with other customers.
- Network segmentation: Customer data, training infrastructure, and application services operate in separate network segments.
- Backups: Datasets and model weights are backed up regularly. Backup retention and recovery SLAs are documented in your Enterprise agreement.
- Monitoring: Infrastructure and application-level monitoring with alerting for availability, performance, and security events.
Data handling
Data ownership: You own your data. Datature does not use your images, annotations, or trained model weights for any purpose other than providing the service to you.
Data deletion: When you delete a dataset, all images, annotations, and associated metadata are permanently removed. Trained model weights remain until you delete them separately. On account termination, all data is deleted within 30 days.
Model portability: Trained models export in HuggingFace SafeTensors format, including full weights, LoRA adapters, and training configuration. You can take your models and leave at any time.
Subprocessors: Datature uses cloud infrastructure providers (AWS, GCP) for compute and storage, and NVIDIA for NIM container images. A full subprocessor list is available on request.
Frequently asked questions
External resources
- Datature Security Center -- Full security overview, certifications, and compliance documentation
- Datature Privacy Policy -- Privacy practices, data processing terms, and your rights
Contact
For security questions, compliance documentation, or to report a vulnerability:
- Security team: [email protected]
- Sales (BAA, DPA, Enterprise): [email protected]
- General support: [email protected]
Related resources
Updated 2 days ago