Compliance

Logging + retention

Short version: we log billing metadata for 30 days, never log prompt or response content, and never train on customer data.

What we log

  • Billing metadata: timestamp, key id, model id, tokens in, tokens out, latency. Retained 30 days for reconciliation.
  • Status code + error class: for the request (e.g. 200, 429, 503).
  • Region routed to: for SLO + cost analysis.

What we never log

  • Prompt content — your messages array stays in memory only for the request
  • Response content — the model output passes through, never persisted
  • System messages or tool definitions
  • Uploaded image bytes (vision requests)

No training

We do not train models on customer data. We do not sell or share request content with third parties beyond the upstream provider you have explicitly routed to (Azure OpenAI, Google Vertex, Anthropic).

Deletion on request

Email hi@getnimbus.net to wipe billing metadata associated with your account on demand. The 30-day window rolls automatically — anything older than that is already gone.

← Compliance overviewDPA