Isolated workloads
Each part of the platform runs in its own container workload, separated from the others.
SquareML
- Home
- Security
Security at
SquareML.
Our clients trust us with sensitive healthcare and financial data. Security is built into how we design, run and maintain our platform.
Runs entirely on AWS
Service-to-service traffic stays inside our private AWS infrastructure.
HIPAA-eligible AI
Models run on Amazon Bedrock. Your data never trains them.
Encrypted
Data is encrypted in transit and at rest.
Watched 24/7
Access to databases and applications is monitored around the clock.
Built on AWSPrivate by
Private by
design.
The SquareML platform runs entirely on Amazon Web Services (AWS). All communication between our platform’s services happens inside our private AWS infrastructure, so data doesn’t travel over the public internet between components.
AWS · private infrastructure
DatabasesConnections only from approved infrastructure
Amazon EKSIsolated application workloads
Amazon BedrockHIPAA-eligible AI models
Encrypted in transit and at restSecrets in a secret managerLeast-privilege accessMonitored 24/7
Outside model providersYour data isn’t shared · never used to train models
Secure, isolated workloadsAmazon EKS,
Amazon EKS,
locked down.
Our applications run on Amazon EKS (Elastic Kubernetes Service), AWS’s managed container platform. It gives us isolated workloads, controlled service-to-service communication and reliable scaling. Our databases accept connections only from approved infrastructure.
Controlled communication
Services talk to each other only along the paths we allow.
Reliable scaling
Capacity grows and shrinks with demand on AWS’s managed container platform.
Locked-down databases
Databases accept connections only from approved infrastructure.
Secure AI with Amazon BedrockYour data stays
Your data stays
yours.
The AI models behind SquareML run on Amazon Bedrock, a HIPAA-eligible AWS service.
- Your data is processed inside AWS and isn’t shared with outside model providers.
- Your data is never used to train the underlying models.
How we handle your dataFour rules,
Four rules,
every day.
Encryption
Data is encrypted in transit and at rest.
In transit means while it moves between systems; at rest means while it is stored. Both are protected.
Secrets management
Credentials are kept in a secure secret manager and never in code.
Applications receive credentials when they run, so source code never needs to hold a key.
Least-privilege access
Team members and services get only the access they need.
Every person and every service starts with nothing and is given only what its job requires.
Continuous monitoring
We monitor access to our databases and applications around the clock and alert on unusual activity.
Who connects, from where and what data is requested — unusual activity stands out and raises an alert.
Built for regulated industriesHealthcare-grade,
Healthcare-grade,
by default.
Our clients include hospitals, health plans, banks and manufacturers — so compliance is part of the design, not an afterthought.
Built to strict regulatory requirements such as HIPAA. We build HIPAA-compliant AI for regulated industries, where data is complex and the stakes are high.
For education, our platform is built to FERPA requirements for student data.
Automation handles the routine work, and your experts handle the judgment calls. People remain in the loop on every measure tied to a CMS or STAR rating target.
How we build and run itEngineered for
Engineered for
production.
The platform’s cloud environments are built to be scalable, secure and cost-optimized.
Amazon EKS clusters
Production-grade, scalable and secure container environments.
Infrastructure as code
Cloud environments defined in code with Terraform, so they can be rebuilt the same way every time.
CI/CD pipelines
Releases built and deployed through Jenkins pipelines.
Observability
OpenTelemetry, Elasticsearch and Kibana to see how systems behave.
Meet the people who run it on our team page.
Questions and answersSecurity,
Security,
answered.
Where does the SquareML platform run?
The SquareML platform runs entirely on Amazon Web Services (AWS).
Does data travel over the public internet between SquareML’s services?
No. All communication between our platform’s services happens inside our private AWS infrastructure, so data doesn’t travel over the public internet between components.
Which AI models does SquareML use, and where do they run?
The AI models behind SquareML run on Amazon Bedrock, a HIPAA-eligible AWS service.
Is my data used to train AI models?
No. Your data is never used to train the underlying models.
Is my data shared with outside AI model providers?
No. Your data is processed inside AWS and isn’t shared with outside model providers.
Is my data encrypted?
Yes. Data is encrypted in transit and at rest.
Who can access my data?
Team members and services get only the access they need (least-privilege access), and we monitor access to our databases and applications around the clock.
Is SquareML HIPAA compliant?
We build HIPAA-compliant AI for regulated industries, built to strict regulatory requirements such as HIPAA, and our AI models run on Amazon Bedrock, a HIPAA-eligible AWS service.
How do I raise a security question or concern?
Contact us through squareml.ai/contact or email sales@squareml.ai.
Discovery callQuestions about
Questions about
security?
Book a call with our team. We’ll walk you through how your data is handled, end to end.