Security
How Langtrain handles your data, what we have and haven't done, and how to keep sensitive data in your own environment.
- Self-hosted option
- TLS
- No certifications yet
Keep data on your hardware
Train with the Python SDK on your own GPU and your data is never uploaded to us. Without an API key, nothing in the training path calls Langtrain. For regulated or confidential data, this is the option to use.
In the Langtrain cloud
- Every connection to Langtrain uses TLS
- Stored data is encrypted at rest by our database provider
- Datasets are used only for the runs you start, and you can delete them from the dashboard
- To delete your account, contact support@langtrain.xyz
Signing in
Sign in with Google, or with your email and a code from an authenticator app (TOTP). The dashboard records sign-ins and account changes in an audit log you can export as CSV.
API keys
Keys are shown once, when you create them, and only a hash is stored. Keep them in environment variables or your secrets manager, never in code, a repository or a browser. Delete a key in the dashboard under API keys as soon as you suspect it has leaked.
python
1export LANGTRAIN_API_KEY=sk-lt-...
Certifications
We have not completed a SOC 2 or ISO 27001 audit. If you need one, train in your own environment, or contact us about Enterprise.
Report a vulnerability
Email security issues to security@langtrain.xyz with steps to reproduce. Please give us time to fix them before you disclose.