Title: Seguran%C3%A7a %E2%80%94 LLM EU
Canonical: https://llmeu.com/pt/security/
Markdown mirror: https://llmeu.com/pt/security.md
Machine-readable: https://llmeu.com/llms.txt (index) - https://llmeu.com/llms-full.txt (full catalogue) - https://llmeu.com/llms-catalogue.json

# Seguran%C3%A7a

What LLM EU does to protect your requests and your data, stated as controls rather than as assurances.

## Transporte e credenciais

- Transport TLS and disk encryption depend on deployment configuration; neither is independently verified here. The backend adapter permits HTTP, so encryption of every connection is not guaranteed by this code.
- API keys are stored as scrypt hashes of the secret half. The secret is shown once, at creation, and is unrecoverable afterwards.
- Session cookies contain id.secret, not a hashed token. The server stores a hash of the secret. Cookies are HttpOnly and SameSite=Lax; Secure is set in production.
- API keys carry scopes. A key without platform_write cannot create or revoke keys or edit a policy.

## Apenas a reten%C3%A7%C3%A3o zero est%C3%A1 implementada: os corpos dos prompts e das conclus%C3%B5es n%C3%A3o s%C3%A3o escritos na base de dados. Pedidos que exijam reten%C3%A7%C3%A3o diferente de zero s%C3%A3o recusados, n%C3%A3o processados silenciosamente com uma defini%C3%A7%C3%A3o de reten%C3%A7%C3%A3o diferente.

Only zero retention is implemented: prompt and completion bodies are not written to the database. Traces contain metadata. Stored policy choices 24h, 7d and 30d do not enable body storage. Requests exceeding policy return 403 retention_exceeds_policy first; otherwise effective nonzero retention returns 501 retention_not_implemented.

## As regi%C3%B5es dos endpoints descrevem configura%C3%A7%C3%A3o, n%C3%A3o geolocaliza%C3%A7%C3%A3o independente. A infer%C3%AAncia real exige um backend configurado para a regi%C3%A3o do endpoint; localiza%C3%A7%C3%A3o europeia e propriedade europeia s%C3%A3o distintas.

Seeded endpoints are mocks: responses say dev-mock and no model weights run. Real inference requires a configured backend for each region and matching endpoints. Region rows and status are configuration, not independent geolocation. Residency filters and failover restrictions are tested; ownership classes do not imply immunity from legal disclosure.

## Subcontratantes

The subprocessor inventory is incomplete. Categories are not confirmed contracted entities. Legal identities, processing locations, data categories and a review date remain pending. [Subcontratantes %E2%86%92](/pt/legal/subprocessors/)

## Ainda n%C3%A3o foi realizado um teste de intrus%C3%A3o independente: n%C3%A3o foi realizado qualquer teste de intrus%C3%A3o independente, n%C3%A3o existem data, %C3%A2mbito ou resultados para publicar, e esta p%C3%A1gina apresent%C3%A1-los-%C3%A1 no dia em que um for conclu%C3%ADdo.

No independent penetration test has been carried out yet. Saying otherwise would be worse than saying nothing.

## Isolation and abuse

- Every customer query is scoped by organization id.
- Rate limits apply per IP, per key and per organization, with a concurrency cap per key.
- Request bodies are capped at 1 MB and validated before anything else happens.
- Stack traces are logged, never returned to a caller.

## Known limitations before launch

- Role authorization within an organization is incomplete as a full RBAC: policy, team, settings, credit and key revocation are limited to owner or admin, a platform_write key can only be minted from the console by an owner or admin, bulk exports need a writing role, and viewer is read-only. Read access to an organization's traces, usage and exports remains organization-wide. These findings are not evidence of cross-organization access.
- Keep stripe_enabled off. When enabled, the credit handler accepts a user-submitted amount without payment verification. This is not a working card-payment integration. Backend fixes and regression tests are required before enabling payments.
- Legal entity details, reviewed agreements and a named subprocessor inventory are unfinished. These disclosures do not establish production security readiness or certification.

[Legal document readiness](/pt/legal/) %C2%B7[Acessibilidade](/pt/accessibility/) %C2%B7 [Evid%C3%AAncia e verifica%C3%A7%C3%A3o](/pt/docs/evidence/)

## Reporting

The disclosure contact is in security.txt. [security.txt](/.well-known/security.txt)

A LLM EU %C3%A9 uma empresa privada. N%C3%A3o %C3%A9 uma institui%C3%A7%C3%A3o da UE nem um organismo de avalia%C3%A7%C3%A3o da conformidade com o AI Act. "Verificado" na LLM EU significa documentado, n%C3%A3o certificado legalmente.