Legal
Security
Last updated
How we isolate machines, protect your data and handle vulnerability reports.
Isolation
Every machine runs in its own hardware-virtualized microVM with a dedicated kernel. Machines never share a process, filesystem or network namespace with another customer.
Data protection
Persistent disks and snapshots are encrypted at rest with per-tenant keys. All traffic to our API, dashboard and machines is encrypted in transit with TLS 1.3.
Secrets
Credentials you attach to a machine are injected at boot and never written to disk or exposed to the model running inside it.
Compliance
Kernal is audited annually for SOC 2 Type II. Reports are available to customers under NDA on request.
Reporting a vulnerability
If you believe you have found a security issue, email security@kernal.run with the details. We acknowledge reports within one business day and never pursue good-faith research.
Questions about this document?
