Trust
Trust, in plain words.
Where your data lives, who can see it, and how to reach us about security. We are early, and this page says exactly where we stand.
Our approach
Four commitments.
Your data is safe with us
Workload data is stored and processed in our own datacentre in Nepal, and is not replicated outside Nepal.
Isolation you can point to
MIG slices are isolated in the GPU itself; reserved GPUs run only your organisation's work.
We look only when you ask
Our staff look at the contents of your workloads only when you ask us to for support, or when the law requires it.
We tell you within 72 hours
If an incident affects your data, we tell you within 72 hours of confirming it: what happened, what was involved and what we are doing.
Data handling
What we keep, and where.
- Account data
- Names, work emails, billing contacts and payment references. Kept in our own records while the account is open, and afterwards as long as Nepali law requires. Signing in goes through our platform vendor's hosted management service and email through our email provider, both outside Nepal.
- Workload data
- Datasets, models, checkpoints, prompts, outputs and logs. Stored and processed in the Kathmandu Valley; deleted when you ask or when your account closes, as set out in your agreement.
- Training on your data
- Never. We do not sell data, and we do not use customer workloads or prompts to train anything.
Subprocessors
Who else touches anything.
None of these see your workload data.
- Platform vendorA hosted management service: signing in and software updates for the platformOutside Nepal
- Website and email providersServe this website, deliver its forms and host our emailOutside Nepal
Responsible disclosure
Found a vulnerability?
Write to info@corevalley.ai with the details. Our security contact is also published in security.txt.
Need more for your review?
Ask for a written description of how your data flows. We prepare it during onboarding.