- Deployment
- hosted
- Hq Country
- United States
- Hq City
- Palo Alto
- Ownership
- private
- Founded
- 2022
- Training Default
- never
- Residency Options
- United States — "under the default Service settings, your personal information and other information sent to the Service shall be stored and processed in the United States"
- Gov Access Exposure
- us-cloud-act
- Eu Ai Act Role
- deployer
- Certs
- ISO 42001, SOC 2 Type II
- DPA available
- yes
- Retention Default
- "We never train on our customer's proprietary code." No retention window is published for code or context: the privacy policy says only that data is kept "as long as necessary to provide our Service" and directs anyone wanting specifics to contact the company. The documented data-retention page returns HTTP 404.
- Retention Exceptions
- International transfers are covered — "we shall only do so under appropriate data transfer mechanisms, such as the Standard Contractual Clauses" — but the default remains US storage and processing, with no EU option published.
- Subprocessors
- not published — "For more details about our subprocessors or Data Processing Agreement (DPAs), please contact us"; the trust centre requires an account to view audit documents
- Subprocessor Count
- 0
- Transfer Mechanism
- sccs
- Eu Procurement Ready
- conditional
- Eu Procurement Reason
- Augment holds the strongest certification pair of any hosted row in this batch — SOC 2 Type II attested and ISO/IEC 42001 certified, the AI-management-system standard almost nobody in this category has yet — and commits in writing never to train on customer code. It is the clearest single illustration of the registry's standing tension between structure and disclosure. Those certifications are visible from the marketing page; the things a data protection officer would actually need are not. There is no published sub-processor list, only an invitation to contact the company; the trust centre puts its audit documents behind a login; the retention documentation 404s; and the default is US storage and processing with no EU option. SCCs are named, which is more than several peers manage. A buyer who can get the DPA and the sub-processor roster under NDA will likely find this row scores higher than it reads — but nothing on the public record lets anyone check.
- Training Claim Basis
- stated
- Training Confidence
- high
- Residency Claim Basis
- stated
- Residency Confidence
- high
- Retention Claim Basis
- stated
- Retention Confidence
- low
- Residency Class
- non-eu-only
- Portability / Exit Path
- proprietary-only
- Subprocessor Jurisdiction
- undisclosed
