--- title: "Security · Promptmetheus" description: "Information on System Security, Compliance, Certifications, Reports, and measures we take to keep your data safe." canonical_url: "https://promptmetheus.com/security" meta: keywords: "Prompt IDE, Prompt Engineering, Prompt Testing, Prompt Optimization, AI Development" "og:description": "Information on System Security, Compliance, Certifications, Reports, and measures we take to keep your data safe." "og:image": "https://promptmetheus.com/og-image.jpg" "og:title": "Security · Promptmetheus" --- > Index of every page on this site: [llms.txt](https://promptmetheus.com/llms.txt) # Security Information on System Security, Compliance, Certifications, Reports, and measures we take to keep your data safe Above everything else, it is our **#1 priority** to keep your data safe and secure. In the following, you can find all publicly available information regarding the security of Promptmetheus systems and services. If needed, you can request the Promptmetheus Security Report here: [Request Security Report Request security information via email]( "Request security information via email") ## How we keep your data safe In order to develop secure software, we adhere to industry best practices and rely on established, well-maintained software frameworks like [Django](https://djangoproject.com "Django framework website and documentation") and [Nuxt](https://nuxt.com "Nuxt framework website and documentation"). The following state-of-the-art methods and procedures are employed to keep our systems and your data safe: ### Encryption - **SSL/TLS** Data is always encrypted when transmitted over the internet. - **Passwords** All passwords are encrypted and never stored in clear-text. ### Software updates Wherever possible, we keep software packages that our systems rely on up-to-date. Operating system-level security patches and updates are applied automatically. ### Automated testing Software we deploy undergoes automated unit- and end-to-end testing during every deployment cycle to ensure functionality, security, and access control. ### Monitoring The system is monitored for issues and vulnerabilities by - [Sentry](https://sentry.io/welcome/ "Sentry app monitoring") - [Snyk](https://snyk.io "Snyk cybersecurity") ## Compliance and certifications We are working on establishing enterprise grade compliance and certification. Compliance - [PCI](https://www.iso.org/standard/72434.html "ISO/IEC TS 27100:2020") Compliant ## Service Availability Availability of all Promptmetheus systems is monitored by [Uptime Robot](https://uptimerobot.com "The world's leading uptime monitoring service"). Admins get notified about downtime within 5 minutes of occurrence and can respond accordingly. System status and 90-day uptime history are publicly available on the [Status](https://stats.uptimerobot.com/N6r9otZ4p0 "System monitoring and uptime history") page. ## Data Privacy and -Processing All information related to data privacy and -processing is outlined in our [Privacy Policy](https://promptmetheus.com/privacy). ## Security of 3rd-party services The overall security of a system is only as good as its weakest link. Therefore, we work exclusively with established 3rd-party services who take security as seriously as we do. Here is the list of relevant 3rd-party service providers that we rely on, together with their respective certifications and security information. ### GitHub We use GitHub to store all of our source code. GitHub is the industry leader for source code management and **SOC 1/2**, **CSA**, **GDPR**, **ISO 27100**, **ISO 27701**, and **ISO 27018** compliant. For more information, please visit their [security page](https://github.com/security "Security details of GitHub services"). ### DigitalOcean We use DigitalOcean as cloud service provider for our database and backend services. DigitalOcean is a trusted industry player and **SOC 2/3**, **CSA**, **GDPR**, and **CBPR** compliant. Digital Ocean also features built-in [DDoS](https://en.wikipedia.org/wiki/Denial-of-service_attack "Denial-of-service attack (Wikipedia)") protection for all droplets. For more information, please visit their [security page](https://www.digitalocean.com/security "Security details of DigitalOcean services"). ### Vercel We use Vercel as DNS- and cloud service provider for all Promptmetheus frontends. Vercel is a trusted industry player and **SOC 2** and **GDPR** compliant. They use [AWS](https://aws.amazon.com "Amazon Web Services") infrastructure and encrypt and backup all of their data. For more information, please visit their [security page](https://vercel.com/security "Security details of Vercel services"). ### Stripe We use Stripe as our payment provider and only store Stripe customer-, subscription-, and product IDs in our databases for maximum security. All sensitive payment information like billing address, credit card details, etc. are stored exclusively on secure and battle-tested Stripe infrastructure. Stripe is the industry leader for payments infrastructure, **PCI Level 1** certified, and **SOC 1/2** compliant. For more information, please visit their [security page](https://docs.stripe.com/security "Security details of Stripe services"). ### LLM APIs and service providers The business model of "LLM as a service" is quite new and the industry is still in the process of establishing the standards and best practices. By using the Promptmetheus platform you are subject to the same security risks that you would incur if you would interact with the providers' APIs directly. ## Reporting vulnerabilities If you, despite all our efforts, discover any vulnerabilities in our systems, please report them confidentially at [security@promptmetheus.com](mailto:security@promptmetheus.com "Email to the security team") and do not disclose them to the public. Note that there is currently no bounty program and we can unfortunately not compensate you for your investigations and reporting, except with an entry in our [Hall of Fame](https://promptmetheus.com/hall-of-fame "Promptmetheus Hall of Fame"). ## Questions and suggestions If you have any questions about the above security details or want to make any suggestions, please don't hesitate to get in touch under [security@promptmetheus.com](mailto:security@promptmetheus.com "Email to the security team"). ```json {"@context":"https://schema.org","@graph":[{"@id":"https://promptmetheus.com/#website","@type":"WebSite","description":"Compose, test, and optimize prompts for your LLM-powered applications, agents, and workflows. Supports 100+ models, prompt versioning, automatic evaluations, and more.","name":"Promptmetheus","url":"https://promptmetheus.com/","publisher":{"@id":"https://promptmetheus.com/#identity"}},{"@id":"https://promptmetheus.com/security#webpage","@type":"WebPage","description":"Information on System Security, Compliance, Certifications, Reports, and measures we take to keep your data safe.","name":"Security","url":"https://promptmetheus.com/security","breadcrumb":{"@id":"https://promptmetheus.com/security#breadcrumb"},"isPartOf":{"@id":"https://promptmetheus.com/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://promptmetheus.com/security"]}],"primaryImageOfPage":{"@id":"https://promptmetheus.com/#logo"}},{"@id":"https://promptmetheus.com/#identity","@type":"Organization","name":"Promptmetheus","url":"https://promptmetheus.com","logo":{"@id":"https://promptmetheus.com/#logo"},"sameAs":["https://github.com/promptmetheus","https://discord.com/invite/7dbUb9wtGj","https://reddit.com/r/promptmetheus","https://x.com/PromptmetheusAI","https://youtube.com/@promptmetheus"]},{"@id":"https://promptmetheus.com/security#breadcrumb","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","name":"Home","item":"https://promptmetheus.com","position":1},{"@type":"ListItem","name":"Security","position":2}]},{"@id":"https://promptmetheus.com/#logo","@type":"ImageObject","caption":"Promptmetheus","contentUrl":"https://promptmetheus.com/icon.png","inLanguage":"en-US","url":"https://promptmetheus.com/icon.png"}]} ``` ## Sitemap See the full [sitemap](https://promptmetheus.com/sitemap.md) for all pages.