Find answers from the community

Updated last month

Llama index security compliance and document handling practices

I was wondering if LlamaIndex has any security compliance certifications e.g. SOC2 ?

Related to this I would like to ask about the circumstances in which you keep original documents in your systems:
  • LlamaParse - I presume you don't keep the original documents beyond what is necessary for the parsing itself? i.e. it's a stateless system?
  • LlamaCloud - Do you keep a full archive of the original documents, or just the metadata?
L
N
s
6 comments
LlamaParse -- files are encrypted and cached for 48 hours, to avoid charges on rerunning
LlamaCloud -- The data indexed is chunked and stored in the cloud
Awesome. Does SOC2 only apply to enterprise customers or to LlamaIndex as a whole?

LlamaCloud - just to confirm, it's chunks of the input documents that you're referring to? i.e. you're not referring to the vector store. And I assume you're storing these encrypted, perhaps in S3?
Regarding LlamaCloud - the data that resides within LlamaCloud is encrypted at rest and in transit. However if you use LlamaCloud to ingest data into your own vector store, its up to you to setup encryption within your own vector DB. Hope that helps!
Add a reply
Sign up and join the conversation on Discord