Skip to main content
Inferix
Trust Center

Trust, proven — not promised.

Most clouds ask you to trust that your workload ran where and how they say. Inferix hands you the evidence: a region-attested Proof-of-Render for every job, data residency enforced before compute is provisioned, and the security controls behind it all — described plainly, with no badges we haven’t earned.

Proof-of-Render· Live — attested where & how it ranData residency· Enforced by jurisdictionSOC 2· Program in progressGDPR· Residency + data controls

The difference is proof. The loudest complaints about GPU clouds in 2026 are the ones you can’t see: pods that bill while they’re down, hardware that shows as available but won’t launch, hosts you can’t verify. Inferix answers that with evidence rather than assurances — a Proof-of-Render that attests where and that a job ran, and residency that’s enforced, not promised. Trust you can audit.

Verifiable compute

What you can prove about your workload — not just trust.

Proof-of-Render

Every workload returns a Proof-of-Render: a keyed artifact binding the job to the GPU and the region it ran in, verified server-side against the hardware’s registered jurisdiction. You get an auditable record of where and that your work executed — evidence, not a promise.

Data-residency enforcement

Set the jurisdictions your organization is allowed to run in. Any rental outside your approved regions is refused before a byte is provisioned, with an auditable reason — no silent cross-border compute.

Jurisdiction-aware marketplace

Filter GPUs by region (US / EU / Singapore / Japan) so you only ever rent compliant hardware. The same taxonomy powers both the filter you see and the policy that enforces it.

How we secure Inferix

The controls behind the platform, in plain language.

Encryption

Data encrypted in transit (TLS 1.2+) and at rest. Secrets are managed with dedicated keys and are never checked into source.

Access control

Role-based access with least-privilege defaults, OAuth sign-in, organization scoping, and audit logging of privileged actions.

Tenant isolation

Rented instances are isolated per tenant, and every API request is authorized server-side. Instances are reaped when a rental ends.

Hardened by default

SSRF protections, strict security headers and CSP, and outbound controls. Services run least-privilege in hardened containers.

Monitoring & logging

Operational telemetry and access logs are collected centrally and designed to exclude personal and sensitive data.

Vulnerability management

Dependencies are pinned and monitored, images rebuilt from pinned bases, and a responsible-disclosure channel is open to researchers.

What we build to

We say plainly where a program is in progress — and we don’t display certifications we haven’t earned.

SOC 2

In progress

Controls mapped to the Trust Services Criteria and operated continuously. Formal attestation is issued by an independent auditor — we’ll publish it when it’s earned.

GDPR & data residency

Enforced

Residency can be pinned by jurisdiction and enforced on every rental, with data-subject controls and a documented data-processing posture.

EU AI Act-ready

Built for it

Jurisdiction enforcement plus region-attested Proof-of-Render give you the “where did this run?” evidence the Act expects, ahead of full enforcement on Aug 2, 2026.

Trust resources

Report an issue, check live status, or dig into how it works.

Need our security documentation?

Security reviews, data-processing details, and our compliance roadmap are available on request. Tell us what your team needs and we’ll get it to you.

    We use cookies for essential functionality and analytics. You can accept or reject analytics cookies.Cookie policy