Borg · Legal

Security

Draft — pending review. This page is not yet indexed by search engines and has not been through the same review as our Terms of Use and Privacy Policy. It describes only what is already true of the product elsewhere on this site.

Model access and control

Borg puts model access behind a team gateway. The gateway shares one key across a team with permissions, limits and budgets, as described in Borg for Business. Image, video and voice access can also be governed by gateway policy.

Routing and approvals

Borg Fusion chooses a model and effort for each request; users can also choose a model directly. Borg proposes missions with evidence, and a person approves a mission before it proceeds, as described on the AI at Scale page.

Visibility into work

Finished missions leave context behind: what worked, who approved it and which model did it. The AI at Scale page describes proposed, approved and logged missions.

Report a vulnerability

There is no dedicated security address for Borg yet. Until there is, send the report to [email protected] with “Borg security” in the subject line; it is a monitored Search Atlas address and the report will reach a person. Please leave sensitive data out of a first message. If you would rather not use email, the Search Atlas contact page also reaches us.

What we have not certified

No audit firm has examined Borg. There is no SOC 2 report, no ISO 27001 certificate, no FedRAMP authorization, no HIPAA business associate agreement, and no third-party penetration test or bug bounty. The Private AI page lists the gaps in full alongside what exists instead. Please do not send protected health information through Borg.

Questions about this page? Email [email protected] or use the Search Atlas contact page.