Skip to main content
Agent traffic is sensitive by construction: prompts, tool arguments, and trajectories routinely carry customer records, cardholder data, or PHI. Akhara treats all of it as regulated data by default.

​
Encryption at rest

All stored data is encrypted with AES-256-GCM: primary databases, object storage, search indexes, caches, and backups. Akhara uses envelope encryption, so data encryption keys are themselves encrypted by a master key held in a key management service, and keys rotate without re-encrypting the underlying data.

​
Encryption in transit

All network communication uses TLS 1.3, with TLS 1.2 as the enforced minimum and older protocol versions disabled. Cipher suites are limited to AEAD suites with perfect forward secrecy, and HSTS is enabled on all public hosts. Enterprise clients can pin certificates in the SDK.

​
Key management

  • Managed keys are held in AWS KMS and rotate automatically every year, with on-demand rotation available
  • Enterprise workspaces can bring their own keys (BYOK) or use customer-managed keys (CMK), keeping key custody in your own KMS
  • In self-hosted deployments, keys never leave your infrastructure: Akhara components encrypt against the key service you operate

​
Sensitive content in logs and traces

Verification requires seeing content, so the platform is built to see it without leaking it:
  • PII and PHI detection can redact, tokenize, or hash identifiers before content is stored or routed to reviewers (PHI/PII handling model)
  • Control plane WARN verdicts can rewrite content in-flight, so redacted versions are what actually get delivered (verdicts)
  • Evidence records that retain original and final content are org-partitioned, access-controlled, and encrypted like any other stored data

​
Model providers

Decisions the PDP makes about your content are used to produce the verdict and its evidence record, not to train models. Where automated checks call an external LLM provider (for example LLM-judged rubric scoring in Evaluation), enterprise workspaces run those calls under zero-retention terms with the provider. Self-hosted deployments can point the same checks at models you host, so content never reaches a third-party provider at all.

​
Retention and deletion

Retention is configurable per data type and workspace. Evidence and audit retention follows your contract, from 30 days on trial up to 7 years for regulated enterprises (see tenancy and isolation). Deletion requests, including GDPR erasure, are supported with the caveat that audit logs keep their regulatory minimums.