Llama index security compliance and document handling practices

Question

I was wondering if LlamaIndex has any security compliance certifications e.g. SOC2 ?

Related to this I would like to ask about the circumstances in which you keep original documents in your systems:

LlamaParse - I presume you don't keep the original documents beyond what is necessary for the parsing itself? i.e. it's a stateless system?
LlamaCloud - Do you keep a full archive of the original documents, or just the metadata?

Logan M · Answer

We have SOC2

Logan M · Answer

https://www.llamaindex.ai/enterprise

Logan M · Answer

LlamaParse -- files are encrypted and cached for 48 hours, to avoid charges on rerunning

Logan M · Answer

LlamaCloud -- The data indexed is chunked and stored in the cloud

Neil · Answer

Awesome. Does SOC2 only apply to enterprise customers or to LlamaIndex as a whole?

LlamaCloud - just to confirm, it's chunks of the input documents that you're referring to? i.e. you're not referring to the vector store. And I assume you're storing these encrypted, perhaps in S3?

sourabhd · Answer

Regarding LlamaCloud - the data that resides within LlamaCloud is encrypted at rest and in transit. However if you use LlamaCloud to ingest data into your own vector store, its up to you to setup encryption within your own vector DB. Hope that helps!

Find answers from the community

Llama index security compliance and document handling practices