Security & trust

Compliance without compromise.

Our security posture, regulatory frameworks, and transparency guarantees — wired into the router, not the marketing page. The audit headers come on every response, so you don’t have to ask twice.

Get an API key Read the docs

Trust

Three contracts your data never breaks.

Each guarantee is verifiable from the response of every call — not a claim on a slide.

01 · No training

CloudSitus never trains on your data.

PHI only reaches providers whose DPA or BAA we have reviewed. General traffic is governed by each vendor’s own API terms; where a vendor offers a per-request training opt-out (Deepgram), we send it on every call. CloudSitus itself stores no prompts or responses.Audit: x-phi-routed names the model that answered; sub-processors are listed at /legal/sub-processors.

02 · No cross-region

Your data does not leave your region.

PHI calls resolve only to providers inside the caller’s jurisdiction — CH, the EU or the US; anywhere else a PHI request is refused. The router refuses to fall back across borders, even under load.Audit: x-phi-routed (model/region/class) on every response; x-phi-tier confirms the path.

03 · No silence

Every call is auditable.

Every routed response names the model, region and data class that served it, and carries an x-request-id to quote; buffered responses also carry the cost. CloudSitus keeps no per-call log; usage is metered to Stripe in aggregate per model and region.Audit: x-phi-routed · x-phi-tier · x-phi-cost-micro · x-request-id on the response.

Compliance

Three honest tiers.

Live at the router, paperwork in flight, or gated on contracts — labeled plainly. We don’t claim a certification we haven’t shipped; what’s dated below is real.

Framework	Region	What we ship	Status
nFADP	Switzerland	CH-resident PHI inference via Infomaniak and Azure (CH); processor agreements under nFADP.	Live
GDPR	European Union	EU-domiciled PHI inference via Scaleway and Azure (EU); DPA available on request.	Live
UK GDPR	United Kingdom	General traffic only, served by Google (global processing). No UK PHI host yet — PHI requests are refused (403 phi_blocked).	In progress
HIPAA BAA	United States	US-resident PHI for OCR, speech-to-text and text-to-speech via Azure under the Microsoft BAA. US chat, vision and embeddings PHI are not available — those requests are refused. (Infomaniak / Scaleway are nFADP/GDPR, not HIPAA.)	Live
Edge data-class	CloudSitus router	PHI vs general enforced per request; no payload logging. No database holds tenant data — a separate database holds the public model catalogue only.	Live
SOC 2	CloudSitus platform	Not started. CloudSitus holds no SOC 2 report today.	Roadmap
LGPD	Brazil + LATAM	General traffic only, served by Google (global processing). No Brazil-resident host yet — PHI requests are refused (403 phi_blocked).	In progress
PIPL	China (PRC)	PRC-domiciled routing requires a local entity + contracts with Alibaba/Baidu/Zhipu.	Roadmap
UAE PDPL	Middle East	General traffic only, served by Google (global processing). UAE-resident PHI needs a resident provider; none is contracted yet.	Roadmap
DPDP	India	Domestic provider routing and cross-border consent flow on the roadmap.	Roadmap
APPI · PIPA · PDPA	Japan · Korea · Singapore	Regional endpoints pending vendor availability in Tokyo, Seoul, Singapore.	Roadmap

Live = shipping today, verifiable at the router. In progress = dated milestones. Roadmap = needs a local entity or partner contract — talk to us if your deployment depends on one.

Transparency

Three things a curl call already proves.

No vendor portal, no support ticket. The contract surface is the response itself.

Open catalog

GET /v1/pricing returns the live rate card visible to your account — every model, region, PHI flag, prompt + completion micro-USD. GET /v1/models lists the same models with their capabilities.

Per-call audit

Every 2xx response carries x-phi-routed (model/region/class), x-phi-tier, x-phi-attempts, x-phi-cost-micro, and x-request-id.

Per-token price

The price on /v1/pricing is the price each call is billed at. We never round up, never bundle, never tier-discount silently.

Verify it yourself

One curl, five audit headers.

Make any call. Inspect the response headers. The resolved (provider, region, model) is right there — no log dive, no support ticket.

request

curl -i https://cloudsitus.com/api/v1/chat/completions \
  -H "Authorization: Bearer phi_live_…" \
  -H "X-PHI: true" \
  -H "X-Region: CH" \
  -d '{"model":"auto","messages":[{"role":"user","content":"hi"}]}'

response

HTTP/2 200
x-phi-routed: infomaniak-nemotron-nano-30b/CH/phi
x-phi-tier: phi
x-phi-attempts: 1
x-phi-cost-micro: 247
x-request-id: 9c2b…

Ready to send the questionnaire?

Spin up a key — the posture above arrives unchanged.

The routing posture is enforced from the first call. Nothing here is a slide; it’s the response of every request.

Get started Read the docs

Prepaid credits from $10 · No subscription · No data retained