Security FAQ
Data protection and platform security
Data protection
How is my data protected from other clients?
On GPU marketplace instances, each client runs in an unprivileged Docker container on the provider's host and only has access to its own data. Containers on the same host are kept apart with:
- Separate namespaces and cgroups
- Network isolation
- File system isolation
- Process isolation
Containers on a host share its kernel, so this is not the same as having a machine to yourself.
How is my data protected from providers?
GPU marketplace instances run on hosts operated by third-party providers, and their security practices vary by provider:
- Data center providers run their own physical and operational security
- Individual hosts may have less formal security measures
OneInfer does not control the physical or operational security of these hosts. For sensitive workloads, use a dedicated deployment, or contact us to talk through your requirements.
OneInfer Private Cloud runs the same stack inside your own cloud account or data center, so the hardware stays under your control. It is in development and set up with our engineers.
Is my traffic encrypted?
Yes. All control-plane traffic uses TLS 1.2+ encryption. Instance-to-instance or user application traffic is encrypted depending on your own configuration.
Do you store my data after my instance is deleted?
No. When you delete an instance, its attached storage is removed with it, and OneInfer does not keep backups unless you create them. Because instances run on provider hosts, encrypt sensitive datasets yourself before upload.
How can I improve my security further?
- Use SSH keys instead of passwords
- Store API keys securely (never commit them)
- Enable firewalls or private networking
- Encrypt your own datasets before upload