Security and data handling
What happens to a traffic export after you send it, and the controls you keep.
Your data trains your model only
Customer data is used exclusively to build and evaluate the models we train for you: evaluation sets, synthetic data generation, fine-tuning, and the cost report. It is never used to train models for anyone else.
You control what leaves your environment
Deployment follows your constraints: our cloud, your VPC, on-premise, or air-gapped. Under enterprise contracts, training and retraining run inside your environment, on your hardware, and nothing leaves it.
GDPR and data processing
distil labs is operated by Distil Labs GmbH in Berlin and works under the GDPR. A data processing agreement (DPA) is available for customers whose workloads contain personal data.
SOC 2
distil labs aligns its internal processes and infrastructure setup with SOC 2 guidelines and runs on established infrastructure providers that maintain their own security certifications. We do not yet hold a formal SOC 2 certification; if your procurement requires the details, we support security reviews directly.
Security review or procurement questions? Write tocontact@distillabs.aior see theprivacy policyandterms.