Security

Proprietary software (and ML models) stay private:

Customers cannot log in to or inspect the running state of a virtual machine running vendor software.

Virtual machine capacity in the customer's appliance that hosts vendor software is provisioned using keys (SSH and disk encryption) owned by the vendor. This virtual machine capacity is provisioned into an isolated VPC with no external network access. Serial port access is also disabled. The customer only has external access to virtual machine capacity: they can see it exists, monitor its resource utilization, modify its network access, and delete it.

See Customer experience > Security and control for more details of the security model.