Security
What stays inside, and what is not claimed
A security review needs locations and limits more than adjectives. These are the ones that apply to adapterOS as it exists today.
Locations
Where each kind of information is held
Source documents
On the host inside the customer environment. They are read there and are not copied to MLNavigator or to a model provider.
Questions and answers
Processed by a model running on that same host. Answering does not require an internet connection.
Run records
Stored in the deployment alongside the sessions they describe. How long they are kept is set by the customer agreement.
Reviewer dispositions
Stored with the result they apply to, under the reviewer’s own account.
This website
Holds no customer documents. It receives only what you type into the evaluation request form; the privacy policy covers that.
Responsibilities
What local execution does not take care of
Keeping the work on a host you control changes where the data is. It does not replace access control, patching, physical security, key management, or incident response for that host. Those remain with whoever operates it.
The boundary described on this site holds for requests made through adapterOS. It says nothing about copies made by other means.
Not claimed
Certifications and regulated data
Certifications
adapterOS holds none and this site implies none.
Regulated data categories
The product has not been qualified for any regulated or classified category. Whether a requirement applies, and whether a deployment meets it, is for the customer and its counsel to determine.
Offline operation
The runtime is built to answer without internet access. That is a design property, not an attested air gap.
Records
A signed record can show that it was not altered. It does not show that a system is secure or that an answer is right.
Illustrations
Every demonstration on this site uses fabricated records. None is evidence of a customer deployment.
Reporting
Report a vulnerability
Email security@adapteros.com with the affected surface, the likely impact, and steps to reproduce. Please leave out credentials, customer records, and personal data.
We acknowledge reports within 2 business days and aim to provide an initial assessment within 5 business days. This covers adapteros.com and the evaluation request host; customer deployments are governed by their own agreements.