Private execution
Optimizer+ is installed into the customer's controlled training environment rather than moving the workload to a Qluon-hosted training service.
Private-pilot controls
Security & Trust
A deployment boundary for evaluating Optimizer+ inside a customer's environment, with explicit telemetry, fallback, and evidence controls.
Operating principle
Customer training assets remain customer assets.
The pilot is designed to execute where the customer's training already runs. Model weights, raw training data, prompts, and checkpoints are not required in Qluon's public evidence systems.
Scoped evidence export
Only explicitly approved configuration and aggregate metrics are exported for pilot reporting. Raw data and weights are excluded by default.
Fallback and resume
Pilot qualification includes native fallback, checkpoint/resume equivalence, and deterministic rollback testing before performance claims are accepted.
Control register
Current controls and roadmap.
| Area | Status | Current boundary |
|---|---|---|
| Customer data locality | Pilot design | Training data, weights, and checkpoints remain in the customer-controlled environment. |
| Telemetry | Allowlisted | Configuration and aggregate metrics only when explicitly enabled; no public upload of weights or raw samples. |
| Artifact integrity | Implemented | Version, commit identity, and SHA-256 artifact manifests accompany frozen releases and evidence packs. |
| Native fallback | Qualification gate | Unsupported or failed runtime paths must return to a declared portable/native path. |
| Checkpoint and rollback | Qualification gate | Resume and rollback behavior is tested against the exact pilot artifact. |
| Access and key handling | Customer-specific | Defined with the customer's identity, secret-management, and least-privilege standards during onboarding. |
| SOC 2 / ISO 27001 | Not certified | No certification claim is made. Enterprise control requirements are handled explicitly in pilot scope. |
| NIST AI RMF / SLSA | Alignment roadmap | Used as control and supply-chain references; no conformity or certification claim is made. |
Pilot review
Security is an acceptance gate, not a footnote.
- 01Inventory. Identify model, data, checkpoints, credentials, telemetry, and artifact boundaries before installation.
- 02Freeze. Hash the exact package and configuration admitted to the customer's environment.
- 03Exercise. Test fallback, interruption, checkpoint resume, and rollback before matched benchmark execution.
- 04Report. Deliver an evidence pack with approved metrics, versions, hashes, incidents, and the final pass or stop decision.
No certification by implication
This page describes the present pilot architecture and planned controls. It does not claim SOC 2, ISO 27001, NIST certification, formal SLSA level, or compatibility outside the verified matrix.