Security overview
Crusoe AI Platform security architecture — multi-tenant isolation, enterprise RBAC roles, resource vs metadata authority, and audited break-glass access.
Service accounts and API keys
Create machine identities, mint API keys with copy-once security, manage personal API keys, and manage credential lifecycles.
API authentication
Platform API authentication standards — Bearer headers, session tokens, API keys, and real-time permission evaluation.
Break-glass and audit
Administrative break-glass protocols, security audit logging, and audit trail specifications.
Data protection
Technical specification of encryption at rest, encryption in transit, log retention, and data security controls.
Workload networking
Inbound and outbound network security policies for deployed agents, functions, and container services.
Data-plane credential lifecycle
Expiration, zero-downtime renewal, and source IP auditing for MemoryStore, Pub/Sub, and VectorDB credentials.