Logic64 security for governed AI generation.
Security is not a feature in Logic64 — it’s a design constraint. From process isolation in the AI engine to payment tokenization, every layer is built to minimize risk surface. The dependency footprint stays deliberately minimal — no LangChain, no agent frameworks — and every generated file is schema-validated, hard-rejected on failure before it ever reaches you.
Security Architecture
Data Encryption
All connections use TLS 1.3. Your workspace data and project specs are stored encrypted at rest via AES-256 hardware-level encryption. Payment data never touches our servers.
Authentication
Identity managed by a SOC 2 certified provider — we never store passwords. Sessions use short-lived JWT tokens. Refresh tokens are rotated on use. MFA is available on all accounts.
Process Isolation
Every AI generation runs in an isolated subprocess (multiprocessing.Process). No shared memory between user requests. Temp directories are scoped per-job and purged on completion.
Payment Security
Payments processed exclusively by Stripe (PCI DSS Level 1 certified). We store only a tokenized reference — no card numbers, CVVs, or full billing addresses on our systems.
Access Control
Authenticated, tenant-scoped access on every API endpoint. Workspace data is isolated two ways — an application-level project_id predicate on every query, plus Postgres row-level security as a defense-in-depth net that denies cross-tenant rows at the database layer, even if an application bug slips through.
Generation Integrity
Every generated file passes an 11-step schema validation chain before packaging. An invalid bundle is hard-rejected — you get a structured failure report, never a corrupt workspace. On pull, configs are safe-merged with zero data loss and every change is recorded in resolution_log.json.
Found a vulnerability?
We operate a responsible disclosure program. If you discover a security vulnerability in Logic64, please report it privately before any public disclosure. We commit to acknowledging every report within 24 hours and resolving critical issues within 72 hours.
We do not currently operate a paid bug bounty program, but we deeply appreciate responsible researchers and will credit your disclosure publicly with your permission.
security@logic64.com →Trusted Infrastructure
Primary Database
Serverless PostgreSQL
Encrypted at rest, tenant-scoped by row-level security, automatic backups.
Distributed Cache
Job queue & caching
TLS-only connections, short TTL on job records, no persistent user data.
Identity Provider
Identity & authentication
SOC 2 Type II certified. We never receive raw credentials.
Stripe
Payment processing
PCI DSS Level 1 — the highest level of payment security certification.
Edge Network
Cloud infrastructure
Automatic HTTPS, DDoS protection, global content delivery with advanced PoPs.
Security questions, audit requests, or compliance documentation?
security@logic64.com