Security & data residency
This page describes how KernelQuad is designed to protect your work. We are in early access and do not yet hold third-party certifications; we will publish any we obtain here.
Where your data lives
When you create a workspace you choose one of our launch regions. Workspace storage and compute for that workspace run in that region.
| Region | Workspaces (compute & storage) | Encrypted backups |
|---|---|---|
| United States | AWS US East (N. Virginia) | Cloudflare R2, North America location |
| European Union | AWS EU (Frankfurt) | Cloudflare R2, EU jurisdiction (data stored and processed in the EU) |
| India | AWS Asia Pacific (Mumbai) | Cloudflare R2, Asia-Pacific location |
Backups are stored with a different provider from the primary workspace so that your data survives an outage at either one. For the United States and India, Cloudflare stores backups in the nearest available location, which may not be inside the same country. If you need country-level residency for backups, contact us before onboarding.
How we protect workspaces
- Isolation: each user session runs in its own isolated container.
- Encryption: data is encrypted in transit (TLS) and at rest.
- Access: sign-in through your institution's SSO where available; role-based access for instructors, teaching assistants and team admins.
- Least privilege: internal access to production systems is restricted and logged.
- Backups: regular encrypted backups of user data, with restore testing.
Service providers
| Provider | Purpose |
|---|---|
| Amazon Web Services | Compute, GPU and primary storage for workspaces |
| Cloudflare | Website hosting, DNS, network protection and encrypted backups (R2) |
Reporting a vulnerability
Please use our contact form and choose "Security report", or follow the contact details in our security.txt. We will acknowledge reports within three business days. Please do not access other users' data or degrade the service while testing.