The production controls behind every DCP request — network, isolation, keys, billing integrity, and Saudi data residency. This is the security baseline the trust center references.
Provider rigs join a private WireGuard mesh; renter traffic reaches the platform over TLS only.
Renter inference runs inside an isolated runtime on the provider host — the prompt never touches the host filesystem.
Renter and provider keys are scoped, revocable, and never logged in clear text.
Only successful inference is billed — metering is atomic, idempotent, and server-measured.
Sovereign requests run end-to-end on verified Saudi GPUs. A cross-border frontier model is the single exception — gated behind explicit per-tenant opt-in and logged distinctly.
Untrusted input is validated before it is processed; the platform fails fast with clear errors.
Services and accounts get only the access they need, and admin surfaces are gated.
Job lifecycle, payment, and administrative actions are aligned to exportable evidence.
Report a vulnerability to security@dcp.sa; we triage and respond before disclosure.
SOC 2 Type II control mapping is active and ISO 27001 gap assessment is queued. Live status for each artifact lives in the trust center.
See the certification roadmap →Open an enterprise security review and we will return a control-by-control plan, plus the trust artifacts your team needs.