Air-gapped data sovereignty and complete client ownership.
We engineer software that lives inside your perimeter. All database schemas, cryptographic keys, and source code remain 100% client property. External LLM inferences execute over zero-data-retention enterprise APIs, ensuring proprietary data never trains commercial models.
What you own upon handover
Cloud Tenancy
All databases and APIs run in your corporate AWS, Supabase, or GCP accounts. You hold the root credentials.
Source Code & IP
Full intellectual property assignment included in standard SOW contracts. Zero proprietary licensing rent.
Customer Data
Your business data never trains public AI models. API calls use zero-data-retention enterprise endpoints.
Runbooks & Docs
Complete architecture diagrams, step-by-step developer runbooks, and staff training guides.
Subprocessor register
| Subprocessor | Purpose | Processing Location | DPA Status |
|---|---|---|---|
| Vercel Inc. | Edge hosting & frontend delivery | USA / Global Edge | Standard Contractual Clauses Signed |
| Supabase Inc. / AWS | PostgreSQL database & object storage | EU / US Regions (Client choice) | Standard Contractual Clauses Signed |
| Anthropic / OpenAI (API) | LLM reasoning engine (Zero-retention API) | USA (API Tier - No data training) | Standard Contractual Clauses Signed |
Mutual Non-Disclosure Agreement (NDA) and formal Data Processing Agreement (DPA) executed prior to diagnostic data review.
Sanitized access control matrix
| Role / Persona | Permitted Scope | Database Layer Access | Write Authority | Authentication Standard |
|---|---|---|---|---|
| Anonymous Visitor | Public website only | None | None | Unauthenticated |
| Inactive / Suspended User | Session terminated | Immediate Revocation | Blocked | Session Expired |
| Operational Clerk | Staging intake & draft creation | Row-Level Security (Own assigned queue) | Drafts only | MFA Enforced |
| Client Executive / Owner | Full organizational ledger & exports | Full Org Tenant Access | Full Approval Authority | MFA Enforced |
Continuous WAL & Daily Snapshots
All production databases utilize continuous Write-Ahead Log (WAL) archiving with point-in-time recovery down to the second. Daily full automated snapshots are replicated across distinct geographic cloud zones.
1-Hour Triage & Automated Kill-Switches
Any detected anomaly or API threshold violation immediately trips the system circuit breaker, pausing automated transactions and dispatching alerts to on-call engineering.
What we do not do
Vanthrope does not operate a multitenant SaaS hosting environment. We do not hold multitenant SOC 2 Type II or ISO 27001 certifications because we do not host your data. Instead, we deploy systems directly into your already-certified enterprise cloud tenancy (AWS, Supabase, Vercel), ensuring your data remains protected by your existing compliance boundary.
We are software and operational systems architects, not external red-team pen-testers. We engineer secure architectures with strict schema validation and MFA, but recommend dedicated third-party security auditors for regulated enterprise penetration tests.
Ready to diagnose your operational friction?
Schedule a 20-minute operational scoping session directly with our Principal Systems Architect. We evaluate your current transactional volume, assess database readiness, and determine the deterministic architecture required to eliminate your operational bottleneck.