Security & Privacy
We take security seriously. Your data is your business, and we are designed to keep it that way.
0 Days Data Retention
We act as a passthrough gateway. We do NOT store your request prompts or completion responses on our servers, except for temporary buffers required for transmission.
Compliance
- Encryption in Transit: All API traffic is encrypted using TLS 1.3.
- SOC 2 Type II: Our infrastructure providers are SOC 2 Type II compliant.
- API Key Security: Keys are hashed and salted at rest.
Privacy Model
When you send a request to CamelStep, we forward it to the provider you selected (e.g., Google or Anthropic). You are subject to that provider's data usage policies for the content itself. CamelStep only logs metadata (timestamp, token count, model ID) for billing purposes.