Question 1

How does Talos process AI requests?

Accepted Answer

Talos processes AI requests within logically isolated, access-controlled environments. Requests are executed using least-privilege permissions and are scoped to the minimum system context required, consistent with SOC 2 principles for security and confidentiality.

Question 2

Does Daedalus use infrastructure in China?

Accepted Answer

No. Daedalus does not deploy, operate, or route customer workloads through infrastructure located in China. Infrastructure regions are explicitly controlled to meet customer data residency and regulatory requirements.

Question 3

How is my code data protected?

Accepted Answer

Customer code is processed in isolated execution environments with strict access controls. Code is not shared across customers and is not retained beyond what is required to complete authorized tasks, aligning with SOC 2 confidentiality controls.

Question 4

What authentication and access controls exist?

Accepted Answer

Talos enforces role-based access controls (RBAC) and supports integration with enterprise identity providers. Access is restricted to authorized users and actions are logged for auditability.

Question 5

What compliance and monitoring is in place?

Accepted Answer

Talos embeds monitoring, logging, and audit controls across the SDLC, supporting compliance with SOC 2, GDPR, HIPAA, PCI, and SOX requirements.

Question 6

Do you support detailed logging?

Accepted Answer

Yes. Talos generates structured, immutable logs that record system activity, access events, and changes, enabling auditability and incident investigation.

Question 7

Do you encrypt data at rest and in transit?

Accepted Answer

Yes. Talos encrypts data at rest using industry-standard encryption algorithms and protects data in transit using modern TLS protocols.

Question 8

What deployment options are available?

Accepted Answer

Talos supports cloud, hybrid, and on-premise deployment models, allowing customers to meet internal security, governance, and data residency requirements.

Question 9

Does Talos scan for vulnerabilities?

Accepted Answer

Yes. Talos performs static code analysis, dependency and container scanning, and infrastructure-as-code validation to identify security vulnerabilities prior to deployment.

Question 10

How does Talos prevent secret leakage?

Accepted Answer

Talos includes automated secret detection controls designed to identify and prevent the exposure of credentials, tokens, and sensitive configuration data.

Question 11

Is activity within Talos auditable?

Accepted Answer

Yes. All system actions are recorded in immutable audit logs that capture who performed an action, what was changed, and when the action occurred.

Question 12

How does enabling Privacy Mode change the data Talos processes and stores?

Accepted Answer

When Privacy Mode is enabled, Talos limits data processing to the active execution window and does not retain customer data beyond task completion, consistent with data minimization principles.

Question 13

Who owns the code created while using Talos?

Accepted Answer

Customers retain full ownership of all code generated or modified by Talos. Daedalus does not claim ownership or reuse customer code.

Question 14

How long will you retain my data?

Accepted Answer

Talos retains customer data only for the duration necessary to perform authorized workflows, unless otherwise contractually agreed.

Question 15

Does Talos transfer data across borders?

Accepted Answer

Data residency is governed by deployment configuration. Talos does not transfer customer data across regions without explicit authorization.

Question 16

How do you handle the data we collect?

Accepted Answer

Talos processes only the minimum data required to deliver the service and does not use customer data for training or secondary purposes.

Question 17

What personal information does Talos collect?

Accepted Answer

Talos collects limited account and access metadata necessary for authentication, authorization, billing, and audit logging.

Question 18

Does Daedalus sign Business Associate Agreements (BAAs)?

Accepted Answer

Yes. Daedalus supports Business Associate Agreements for customers subject to HIPAA and other regulated data requirements.

Question 19

Is customer data used to train AI models?

Accepted Answer

No. Customer data and code are not used to train Daedalus or third-party large language models.

Question 20

Can we control data retention policies?

Accepted Answer

Yes. Data handling and retention policies can be configured to align with customer governance, compliance, and regulatory requirements.

Question 21

What customer support is available?

Accepted Answer

Daedalus provides enterprise-grade support with defined response times and access to technical experts, aligned with SOC 2 availability and support controls.

Question 22

How does Talos index my codebase?

Accepted Answer

Talos analyzes code structure and dependencies in-memory to perform authorized tasks without permanently storing source code.

Question 23

Can Talos operate in restricted network environments?

Accepted Answer

Yes. Talos can be deployed in restricted or isolated network environments, including environments with limited or no outbound internet access.

Question 24

How transparent is Talos during execution?

Accepted Answer

All actions performed by Talos are observable and auditable, ensuring customers maintain transparency, control, and oversight.

Daedalus Security Resources

Controls

Infrastructure security

Organizational security

Product security

Internal security procedures

Data and privacy