Enterprise controls. India-first data handling.
unoblox is built to route sensitive inference safely: retain nothing by default, log only metadata, encrypt at rest, and keep data on infrastructure hosted in India. Here is exactly what that means — and what we do and don't claim.
What protects your data
These are capabilities the platform ships today — not aspirations. Where something is on the roadmap, we say so.
Zero-data-retention routing
Route sensitive traffic to endpoints that retain nothing. No prompts or completions are persisted on the ZDR path.
Metadata-only logging
Usage rollups record token counts and cost — never prompt or completion content — so observability never means exposure.
Encryption at rest
Data at rest is encrypted, including BYOK provider keys, which are never exposed to other tenants.
SSRF-pinned egress
Outbound calls resolve against a pinned, validated allowlist — the gateway cannot be steered to arbitrary internal or external hosts.
Guardrails & moderation
Allow / block lists constrain which models and providers a key can reach; moderation screens traffic before it leaves the gateway.
Private AI
Dedicated GPUs run for your organisation. Talk to the team.
Metadata-only by default
The gateway is designed so that observability never requires reading your content. You choose how much further to lock things down.
- We record — Token counts, cost, model, timestamp and status — the metadata needed for billing, usage and audit.
- We don't record — Prompt or completion content on the standard path; nothing at all on the zero-data-retention path.
- You control — Retention posture per workload — route sensitive traffic to ZDR and constrain providers with allow / block policy.
Content stays yours
Usage rollups exist to bill and to help you understand your own spend — never to build a dataset. For workloads that can’t tolerate any retention, ZDR routing carries no prompt or completion content at any hop.
Hosted in India, in certified facilities
Where your workloads run matters for both security and sovereignty. unoblox runs on infrastructure hosted in India, in a certified data-center facility.
Yotta data centers, in India
unoblox infrastructure is hosted with Yotta, a major Indian data-center operator, inside their facilities in India. We inherit the facility’s physical and environmental security — access control, power, cooling and resilience — and your data stays on Indian soil, which underpins our data-residency and DPDP-readiness story.
- Data residency — Workloads run in India, supporting data-residency intent under the DPDP era.
- Facility security — Physical and environmental controls of a certified, Tier-IV-class data center.
Facility certifications vs. organisational certifications
The certifications — such as SOC 2, ISO 27001, PCI-DSS and Tier-IV-class facility status — are held by Yotta as the facility operator, and unoblox inherits their physical and environmental controls and India data residency.
unoblox is hosted in Yotta’s data centres in India; facility-level certifications are Yotta’s. unoblox does not claim these as its own organisational certifications, and does not currently hold organisation-level SOC 2 or ISO 27001 certification.
Who can do what — provable after the fact
Wire unoblox into your identity provider, isolate teams, and keep a tamper-evident record of every sensitive change.
SAML SSO
Single sign-on with your identity provider.
SCIM provisioning
Automated joiner-mover-leaver lifecycle for users and groups.
Workspaces
Isolate teams with their own keys, budgets and policy.
Immutable audit trail
Every sensitive change is recorded and tamper-evident.
Maker-checker
Sensitive platform actions require a second approver.
Per-provider data policies
Each provider's data terms are honored and surfaced per model.
What we claim — and what we don't
Trust is built on precise statements. Here is where things actually stand today.
Payments
Card and payment details are handled by Razorpay (a PCI-DSS compliant payment processor). unoblox never stores card numbers.
Facility
Physical and environmental security is inherited from Yotta’s certified data centers in India — the certifications belong to the facility, not to unoblox as an organisation.
Organisational certifications
RoadmapFormal org-level certifications (for example SOC 2 or ISO 27001) are on our roadmap. We don’t claim to hold them today, and we won’t imply otherwise.
Report a vulnerability
Found a security issue? We want to hear from you. Send us the details through the form below — it routes straight to our security team — and we’ll coordinate a fix. Please don’t disclose publicly until we’ve had a chance to respond.
Security questions before you build?
Talk to our team about ZDR, SSO/SCIM and data controls. Private AI: dedicated GPUs run for your organisation. Talk to the team.