LEGAL GOVERNANCE // LAST UPDATED OCTOBER 2026
Zero-Log Privacy Policy & Cryptographic Sub-Processor Schedule
01. Zero Payload Retention Architecture
Bastion Cloud processes API traffic strictly inside volatile, hardware-encrypted Nitro Enclave memory. We never log, inspect, sample, or persist customer request headers or payloads to disk.
02. Account & Telemetry Metadata
We collect minimal billing, organization admin contact, and aggregate request-count telemetry solely to enforce rate limits, deliver SLA status alerts, and generate monthly commit invoices.
03. GDPR Data Processing Addendum & Regional Pinning
Enterprise and Sovereign customers may pin all control-plane metadata strictly to EU-Frankfurt, Zurich, or US-Gov regions. Structural template notice: review with your DPO and legal counsel prior to production launch.
01 // BASTION CLOUD
Zero-Trust Cloud Mesh
Hardware-attested AWS Nitro Enclaves, customer-managed BYOK KMS, and sub-9ms Anycast mTLS across 38 edge POPs.
02 // INFRASTRUCTURE
Platform & Economics
Predictable per-million request commits with zero NAT Gateway or egress surcharges.
03 // CRYPTOGRAPHY BENCH
Company & Research
Engineered by kernel, eBPF, and post-quantum lattice cryptographers in SF & Zurich.
04 // GOVERNANCE & DOCS
Compliance & Manual
SOC-2 Type II, HIPAA BAA, FIPS 140-3 HSM, and 12-station buyer setup documentation.
© 2026 BASTION CLOUD INC. · SOC-2 TYPE II · ISO 27001 · FIPS 140-3 LEVEL 3 · ZERO PAYLOAD RETENTION.
ALL 38 ANYCAST EDGE POPS OPERATIONAL // 8.2MS P99