Your data stays in one place, and only the people who need it can see it.

• Application: Amazon Web Services (EC2 behind CloudFront), US West (Oregon). Database: managed PostgreSQL on Amazon RDS, US West (Oregon). Code-test runner: our own isolated containers on a dedicated Amazon EC2 server, US West (Oregon).
• Encrypted in transit with TLS from browsers to CloudFront, from CloudFront to our web server, and from the web server to the database. Encrypted at rest on all AWS storage: server disks, the database and file storage.
• AWS is the only third party that stores or processes client data. GitHub holds our source code, never client data. The app uses no analytics or tracking services.
• Client data enters as task files (JSONL or CSV) uploaded in the app. It leaves only as exports the client downloads. It is never kept in shared documents, email attachments or public links.

Code and tests that experts write run only in our own containers, never on a hosted sandbox service. Containers run under gVisor for an extra layer of kernel isolation.

• Fresh container

  Created for each check, deleted afterwards

• No network

  Code cannot call out or be reached

• Read-only system

  Only a scratch folder is writable; nothing mounted from the host

• Unprivileged

  Runs as a normal user with every Linux capability removed

• Hard limits

  1 CPU · 512 MB memory · 128 processes

• Time-boxed

  30 seconds per test run

The app reaches the runner only with a secret token, over a private network inside our AWS account, and the runner accepts connections only from our web server. The runner keeps nothing. Results, including up to 16,000 characters of test output per run, are saved in our database with the answer.

Delivered data identifies experts only by per-project pseudonyms.

• The server checks the user's role on every page and action. Exports are served only to the client that owns the project.
• Passwords are stored as bcrypt hashes. Sessions are signed and kept in httpOnly, Secure cookies that expire after 7 days.
• Two-factor login is required on every company account: email, code hosting, cloud hosting and database. being set up
• Direct production database access is limited to a short list of named people.

• All experts are located in the United States.
• Every expert passes a screening test and human approval, then signs a contractor agreement with confidentiality and IP-assignment terms before their first task. being set up
• All work happens inside our platform.
• A written policy forbids using AI to do the work. We enforce it with hidden test tasks that have known answers, flags for unusually fast or short work and AI-style writing, and reviewer checks. An expert is removed on the first confirmed case.

• A client's data is used only for that client's project. It is never shared with other clients or used to train models.
• We keep client data for retention period: to be confirmed, then delete it. On request we delete it sooner, within deletion time: to be confirmed, and it leaves our automated backups within 7 days. We confirm deletion in writing.

We notify affected clients within notice period: to be confirmed of confirming a security incident, at the contact named in the contract. Security contact: address: to be confirmed.

Canonset is independent. No AI lab owns equity or holds a board seat. We do not work for organizations headquartered in, or at least 50% owned or controlled from, China (including Hong Kong and Macau), Russia, Iran, North Korea, Cuba or Venezuela, directly or through resellers. We screen every client's parent company against US government restricted-party lists. being set up

Not in place yet. We will list each one here with its date once it is scheduled.

• SOC 2 Type II auditPlanned
• Audit log of data accessPlanned
• Single sign-on and two-factor login inside the platformPlanned
• Self-service deletion and retention settings for clientsPlanned
• Independent penetration testPlanned