Security & Trust

Altimate is SOC 2 Type II, uses a metadata-only / local-first architecture, and never trains models on customer data. Each product documents its own security model:

• Altimate Code — Security FAQ: sandboxing, sensitive-write protection, telemetry, MCP hardening.
• Power User for dbt — Security FAQ: local mode, what metadata is sent, SOC 2, retention.
• Altimate MCP — Security FAQ: local-first MCP, credential storage, PII guardrails.
• Enterprise Platform — Security FAQ: data privacy, encryption, access control.

Shared guarantees: TLS 1.3, AWS private VPC, IAM RBAC, MFA enforced, and a 30-day feedback retention window.