Data Privacy & Zero Data Retention (ZDR)
Nicrron is engineered specifically for privacy-sensitive enterprises, healthcare providers, and financial institutions requiring strict data sovereignty and zero prompt persistence.
1. Zero Data Retention (ZDR) by Default
Nicrron operates purely as an in-memory streaming proxy. When you submit a completion request, prompt chunks and response tokens are processed entirely in volatile RAM and immediately discarded once the HTTP stream concludes.
- No Prompt Storage: Prompts, system instructions, and messages are never saved to disk, databases, or object storage.
- No Model Retraining: Neither Nicrron nor our enterprise provider agreements permit using your queries for model training.
- In-Memory Transit Only: SSE token streams are piped directly from upstream providers to your client with sub-10ms buffer latency.
HIPAA, SOC 2, and GDPR Alignment
Because raw prompt text and completion tokens are never persisted in our persistent storage layers, your AI traffic remains fully isolated and compliant with standard BAA and enterprise compliance frameworks.
2. Metadata-Only Telemetry & Logs
To provide real-time dashboard analytics, billing settlements, and provider uptime metrics, Nicrron logs strictly non-sensitive metadata:
3. Redis Cache Cryptographic Isolation
When Exact Caching is active (for deterministic queries at temperature: 0), cache keys are generated using a one-way SHA-256 hash of your request parameters. Cache records are isolated per organization, encrypted, and automatically purged based on TTL expiry.
4. AES-256-GCM Key Encryption
All upstream provider keys and Nicrron secret keys are encrypted using AES-256-GCM authenticated encryption at rest. Keys are decrypted solely in-memory within isolated gateway runtime memory and never exposed in logs or client bundles.