Security & Trust
Where your data lives.
Run Surogate in our EU cloud, your cloud, your hardware or an air-gapped network. Keys, files and logs stay where you run it.
- EU hosting
- Air-gapped installs
- Open source you can read
- No training on your data
Where it runs.
The same platform in each. The taller the bar, the less leaves your walls.
Our EU cloud
Hosted in the EU. Start in minutes.
Your cloud
Your account, your region, your keys.
Your hardware
On your servers, managed by your team.
Air-gapped
No connection out. Models included.
Agents stay inside the rules.
- Keys the agent never sees.
- The proxy adds credentials on the way out. They stay in your vault.
- Rules fixed for each turn.
- Text injected mid-turn cannot loosen the tool policy.
- Sensitive calls wait for a person.
- They wait in the inbox. A grant covers one call, for one hour.
- Definitions checked for changes.
- Agent definitions are scanned for hidden instructions and fingerprinted against changes.
- Records in your storage.
- Sessions, files and logs stay where you run the platform.
On our cloud.
Hosted in the EU. What we do, and do not do, with what you put there.
- We do not train on your data.
- Your workspace is private, and hub artifacts are private by default.
- You can export everything at any time, with no egress fees on hub content.
- Model calls through llm.buzz can be routed to EU providers only, on every plan.
Read the code.
Your security team can check what runs, line by line.
Found a vulnerability?
Write to us with the steps to reproduce it. Please give us time to fix it before you publish.
[email protected]Bring your security questions.
We walk your team through the deployment you need.