Trust Model

Security & Privacy

EnAtlas is built around a local-first trust model. Your data stays under your control.

Your Keys Stay Local

Provider API keys never leave your environment. They are never sent to EnAtlas cloud, never stored in our database, and never logged.

No Proxy in the Critical Path

EnAtlas cloud is never in the critical request path for model calls. All execution happens locally via the SDK or sidecar.

Async Telemetry Only

Telemetry is asynchronous and best-effort. It never blocks your API calls. If telemetry upload fails, your requests still succeed.

No Raw Prompts or Completions

By default, we do not store raw prompts or completions in the cloud. Waste detection uses hashes and derived signals.

Workspace Isolation

All telemetry data is scoped to your workspace. Row-level security ensures strict data isolation in our database.