Find answers from the community

Updated last month

Llama index security compliance and document handling practices

I was wondering if LlamaIndex has any security compliance certifications e.g. SOC2 ?

Related to this I would like to ask about the circumstances in which you keep original documents in your systems:

LlamaParse - I presume you don't keep the original documents beyond what is necessary for the parsing itself? i.e. it's a stateless system?
LlamaCloud - Do you keep a full archive of the original documents, or just the metadata?

6 comments

LLogan M

We have SOC2

LLogan M

https://www.llamaindex.ai/enterprise

Attachment

LLogan M

LlamaParse -- files are encrypted and cached for 48 hours, to avoid charges on rerunning

LLogan M

LlamaCloud -- The data indexed is chunked and stored in the cloud

NNeil

Awesome. Does SOC2 only apply to enterprise customers or to LlamaIndex as a whole?

LlamaCloud - just to confirm, it's chunks of the input documents that you're referring to? i.e. you're not referring to the vector store. And I assume you're storing these encrypted, perhaps in S3?

ssourabhd

Regarding LlamaCloud - the data that resides within LlamaCloud is encrypted at rest and in transit. However if you use LlamaCloud to ingest data into your own vector store, its up to you to setup encryption within your own vector DB. Hope that helps!

Add a reply