Security & Trust Center
Built to pass your toughest security review.
CarnotCloud reads your bill — never your workloads. Least-privilege, read-only access, independent audits and enterprise controls are built in from day one, not bolted on.
Read-only by design
See exactly what we can access. Line by line.
We publish the exact policies CarnotCloud uses. Deploy them with our CloudFormation, ARM, Google Cloud or Terraform templates, protected by an External ID — and revoke access with one click at any time.
What we read
- Billing & cost exports
- Resource metadata & tags
- Utilization metrics
- Commitment & pricing data
What we never touch
- Application data & databases
- Secrets, keys & credentials
- Logs, prompts & completions
- Customer PII or PHI
{
"Version": "2012-10-17",
"Statement": [{
"Sid": "CarnotCloudReadOnlyBilling",
"Effect": "Allow",
"Action": [
"ce:Get*", "ce:Describe*", "ce:List*",
"cur:Describe*", "bcm-data-exports:Get*",
"organizations:Describe*", "organizations:List*",
"savingsplans:Describe*", "ec2:Describe*",
"cloudwatch:GetMetricData", "tag:GetResources"
],
"Resource": "*"
}, {
"Sid": "ReadBillingExport",
"Effect": "Allow",
"Action": ["s3:GetObject", "s3:ListBucket"],
"Resource": ["arn:aws:s3:::your-cur-bucket", "arn:aws:s3:::your-cur-bucket/*"]
}]
}Controls
Enterprise security, end to end
Data protection
- AES-256 encryption at rest, TLS 1.3 in transit
- Customer-managed keys (BYOK) on Enterprise
- Logical tenant isolation; single-tenant option
- Data deleted within 30 days of termination
Identity & access
- SSO via SAML 2.0 and OIDC (Okta, Entra ID, Google)
- SCIM provisioning and enforced MFA
- Granular, row-level RBAC by team and account
- Immutable audit log of every user and API action
Infrastructure & operations
- Hosted on AWS in the US and EU
- 99.9% uptime SLA and public status page
- RPO 1 hour / RTO 4 hours, tested twice a year
- 24×7 security monitoring and incident response
Secure development
- Secure SDLC with mandatory peer review
- SAST, DAST and dependency scanning in CI
- Annual third-party penetration tests
- Responsible-disclosure and bug-bounty program
AI & data use
- Enterprise LLM endpoints with zero data retention
- Your data never trains shared models
- Carnot AI inherits your RBAC permissions
- AI features can be disabled per tenant
People & governance
- Background checks for all employees
- Annual security & privacy training
- Least-privilege, just-in-time internal access
- Vendor risk management for all sub-processors
Deployment & residency
Deploy the way your risk team prefers
Multi-tenant SaaS
Fastest to deploy. Hosted in the US or EU with full logical isolation.
Dedicated single-tenant
An isolated environment and database for your organization, region-pinned.
Data stays in your cloud
CarnotCloud reads billing exports in place from a bucket you own and control.
Private connectivity
AWS PrivateLink and IP allowlisting for private, auditable access paths.
Sub-processors
Who helps us run CarnotCloud
We notify customers 30 days before adding a sub-processor that processes customer data.
| Sub-processor | Purpose | Location |
|---|---|---|
| Amazon Web Services | Cloud hosting & storage | US / EU |
| Cloudflare | CDN, DNS & web application firewall | Global |
| Anthropic / OpenAI (enterprise, zero retention) | Carnot AI language models | US / EU |
| Datadog | Infrastructure monitoring (no customer cost data) | US / EU |
| Resend | Transactional email | US |
Security package
Everything your security team needs, in one request.
Get our SOC 2 Type II report, ISO 27001 certificate, penetration-test summary, policies, DPA and completed CAIQ — typically within one business day.
- Shared securely under mutual NDA
- Direct line to our security team for follow-ups
- Custom questionnaires welcome
Found a vulnerability? Email security@carnotcloud.com. See security.txt.
Request the security package
We’ll reply within one business day.
FAQ