Data handling

What Radium logs, stores and trains on

Data handling

Radium’s data handling policy is designed to protect your data and give you control over retention.

What we log

Data type	Retention	Purpose	Encrypted
Token counts	Varies by plan	Billing, usage analytics	Yes (AES-256)
API key ID (not the key itself)	Varies by plan	Audit trail	Yes (AES-256)
Request metadata (timestamps, IP)	Varies by plan	Security, rate limiting	Yes (AES-256)
Error logs	3 months	Debugging, incident response	Yes (AES-256)

What we do NOT log

• Raw API keys (only hashed)
• Credit card numbers (handled by Stripe)
• SSH keys, database passwords or other secrets in prompts

Training data policy

Customer prompts and completions are not used to train Radium models unless you explicitly opt in via a separate data-sharing agreement.

If you want to contribute data for model improvement, contact [e-mail].

Zero-retention tier

Enterprise customers can request a zero-retention tier where prompts and responses are not persisted. Only minimal metadata (token counts, timestamps) is retained for billing purposes. Contact [e-mail] to enable.

Encryption

• In transit: TLS 1.3
• At rest: AES-256-GCM
• Key management: HashiCorp Vault with HSM backing

Compliance

Radium is working toward the following certifications:

Certification	Status	ETA
SOC 2 Type II	In progress	Q2 2027
ISO 27001	In progress	TBD
GDPR	Compliant	Live
HIPAA	In progress	TBD

Requesting your data

Export all data associated with your account:

curl https://api.radium.cloud/v1/account/data-export \
  -H "Authorization: Bearer $RADIUM_API_KEY"

Response is a signed S3 URL valid for a limited time; download promptly.

Deleting your data

Delete all account data, including prompts and responses:

1. Go to Settings → Privacy → Delete Account Data
2. Confirm the deletion
3. Data is purged within a short window; for immediate deletion, contact [e-mail]