← Ludian

Trust Center

Real-time uptime, security architecture, and compliance posture. Updated continuously from production telemetry — not a marketing page.

Service degraded
Compliance documentation

90-day uptime

%

Total incidents0
Outage minutes0
Window90 days

Daily uptime · last 90 days

100%degradedincident

Loading live telemetry…

Security activity · 90 days

Aggregated, anonymized counts from the production audit trail. Tenant-identifying fields are stripped at the data-API layer; only event totals are surfaced here.

RLS bypass audits run

0

Vulnerability patches applied

0

Key rotations completed

0

Kill-switch events

0

Security architecture

Ludian is multi-tenant by construction. Every row is scoped to a tenant hash; every read passes through Postgres RLS before it leaves the database.

Tenant-isolated storage

Per-tenant SHA-256 hash partitioning. RLS policies on every table validate auth.uid() and workspace membership before a row is returned.

Encryption in transit & at rest

TLS 1.3 on every public endpoint. Postgres data-at-rest encrypted with AES-256. Per-tenant KMS keys for sensitive vault fields.

JWT-scoped Data API

Every client request carries a short-lived JWT. Service-role keys never leave the edge runtime; admin operations are signed and audited.

God-Switch kill-cord

Super-admins can sever all external LLM billing in one click. Every toggle writes an audit event surfaced above.

RLS bypass red-team

Automated adversarial tests probe every public table for cross-tenant leakage. Failures page the on-call engineer immediately.

Stateless edge runtime

API workloads run on globally distributed edge functions with no persistent disk. Cold storage is append-only and verifiable.

Compliance documentation

No third-party attestation report is published today. The security posture described on this page is what we operate; the uptime and audit figures above come from production telemetry rather than a certification claim.