Openlayer: AI evaluation and observability for enterprises

Security at Openlayer

At Openlayer, we are committed to maintaining the highest standards of security and privacy to protect your data.

SOC 2 Type II

Ensures Openlayer meets high standards for data security and operational integrity, validated through regular audits.

GDPR

Guarantees Openlayer handles personal data with strict privacy protection in line with EU regulations.

HIPAA

Coming soon

Ensures Openlayer secures data in compliance with U.S. regulations for managing Protected Health Information.

Trusted by top AI teams

Enterprise-grade security

Security
at every layer.

Openlayer protects your data with SOC 2, GDPR compliance, role-based access, SSO, air-gapped deployments, encryption, and automated backups across multi-region hosting.

SOC 2 Type II compliance

Openlayer undergoes regular third-party audits to ensure continued SOC 2 Type II compliance.

GDPR compliance

We meet the General Data Protection Regulation (GDPR) standards for data protection in Europe.

Role-based access control

Assign roles and permissions to ensure appropriate access control across your organization.

Single sign-on (SSO)

Enable secure, one-click authentication using Google Single Sign-On (SSO) for easy access.

SAML / OIDC

Openlayer supports SAML and OIDC protocols with popular identity providers like Okta.

Directory sync

Easily manage your workspace members using third-party identity provider integrations.

Air-gapped deployments

Deploy Openlayer in your own VPC with no external network connections for maximum security.

Data encryption

We use HTTPS and TLS 1.2 for data in transit and AES 256-bit encryption for data at rest.

Automated backups

Openlayer stores data redundantly with fully automated backups to prevent data loss.

Multi-region hosting

Choose to store your data in either the EU or the US for optimal regulatory compliance.

Security FAQs

Your questions, answered.

Learn about Openlayer's compliance with SOC 2, GDPR, role-based access, SSO, secure deployments, encryption, and automated backups across multi-region hosting.

Is Openlayer SOC 2 Type II compliant?

Yes, Openlayer is SOC 2 Type II compliant. We were audited by Vanta & Insight Partners.

Is Openlayer GDPR compliant?

Yes, Openlayer complies with all articles of GDPR.

Is Openlayer HIPAA compliant?

Openlayer is not currently HIPAA compliant. You can attain compliance by self-hosting Openlayer in your own VPC.

Is my data encrypted?

Yes, Openlayer encrypts data in transit with HTTPS and TLS 1.2, and data at rest with AES 256-bit encryption.

Does Openlayer conduct regular penetration testing and vulnerability scans?

Yes, Openlayer conducts regular penetration tests with third-party experts. We also run daily code reviews, static analysis checks, and dependency scanning of our code.

Does Openlayer have a bug bounty program?

We have a responsible disclosure program. For more information, please refer to our responsible disclosure policy.

Security at Openlayer

At Openlayer, we are committed to maintaining the highest standards of security and privacy to protect your data.

Trusted by top AI teams

Enterprise-grade security

Security
at every layer.

Openlayer protects your data with SOC 2, GDPR compliance, role-based access, SSO, air-gapped deployments, encryption, and automated backups across multi-region hosting.

Security FAQs

Your questions, answered.

Learn about Openlayer's compliance with SOC 2, GDPR, role-based access, SSO, secure deployments, encryption, and automated backups across multi-region hosting.

Is your question not listed here?
Please get in touch at support@openlayer.com.

Stop guessing. Ship with confidence.

The automated AI evaluation and monitoring platform.

Security at Openlayer

At Openlayer, we are committed to maintaining the highest standards of security and privacy to protect your data.

Trusted by top AI teams

Enterprise-grade security

Securityat every layer.

Openlayer protects your data with SOC 2, GDPR compliance, role-based access, SSO, air-gapped deployments, encryption, and automated backups across multi-region hosting.

Security FAQs

Your questions, answered.

Learn about Openlayer's compliance with SOC 2, GDPR, role-based access, SSO, secure deployments, encryption, and automated backups across multi-region hosting.

Is your question not listed here?Please get in touch at support@openlayer.com.

Stop guessing. Ship with confidence.

The automated AI evaluation and monitoring platform.

Security
at every layer.

Is your question not listed here?
Please get in touch at support@openlayer.com.