Data security
Compliance
Hasura undergoes rigorous compliance audits.
Customer data
In the context of PromptQL, customer data refers to the following:
- Data served by the data plane APIs like the data API and the GraphQL API
- Data processed by the PromptQL runtime
- Chat threads and artefacts stored therein
For enterprise customers on Private DDN, data is processed and stored within the private network boundary.
For Public DDN customers, data is processed and stored in a multitenant cloud environment with industry standard security measures.
During local development, data is processed and stored in your local environment. The Python runtime for local development runs in a secure DDN cloud environment.
The Python runtime in the cloud environment does not have any outbound network access.
The Python runtime by itself is stateless and does not store any data.
Data is sent to LLMs (Anthropic or OpenAI as configured) as required.
The PromptQL system does not persist data outside of chat threads and the artefacts stored in them.
Some connectors, like the duckduckapi or duckdb connector, may persist data.
Licensing
PromptQL is available under a commercial license.
Some components such as the connectors are available under open source licenses. Specific license information is available in the source code repositories.