Bixel

Turbopuffer

Turbopuffer Inc.·Turbopuffer.com
Security Posture

Compliance-ready

As of September 3, 2026, Turbopuffer's security: Turbopuffer holds SOC 2 and SOC 2 Type II certifications alongside GDPR and CCPA coverage, with audit logs, encryption at rest, and encryption in transit among seven stated controls. Data residency is listed as global, so buyers with strict regional data requirements should confirm specific region availability before committing.

Backed by 12 dated facts
Every value derives from a dated, sourced capture — open any fact for its source.
Certifications
SOC 2SOC 2 Type II
Privacy
CCPAGDPR
Controls
Audit LogsEncryption At RESTEncryption In TransitIP AllowlistingPrivate LinkPrivate NetworkingSSO
Details
Data residencyGlobal
Security Change Historydated events · values unlock with a key
Security signal removed: Pen Testing · high significance
Security signal removed: VPC Peering · high significance
Security signal removed: HIPAA · high significance
Security signal added: VPC Peering · high significance
Security signal removed: VPC Peering · high significance
Security signal added: Data Residency · high significance
Security signal added: IP Allowlisting · high significance
Security signal added: Pen Testing · high significance
Every security fact on this pagekey · value · provenance · dated · sourced
FactValueProvenanceAs ofSource
security.audit-logsAudit Logscompany stated2026-09-03turbopuffer.com/docs/security
security.cert.soc2SOC 2company stated2026-09-03turbopuffer.com/pricing
security.cert.soc2-type-iiSOC 2 Type IIcompany stated2026-09-03turbopuffer.com/docs/security
security.data_residencyglobalcompany stated2026-09-03turbopuffer.com/docs/security
security.encryption-at-restEncryption At RESTcompany stated2026-09-03turbopuffer.com/docs/security
security.encryption-in-transitEncryption In Transitcompany stated2026-09-03turbopuffer.com/docs/security
security.ip-allowlistingIP Allowlistingcompany stated2026-09-03turbopuffer.com/docs/security
security.privacy.ccpaCCPAcompany stated2026-09-03turbopuffer.com/docs/security
security.privacy.gdprGDPRcompany stated2026-09-03turbopuffer.com/docs/security
security.private-linkPrivate Linkcompany stated2026-09-03turbopuffer.com/docs/security
security.private-networkingPrivate Networkingcompany stated2026-09-03turbopuffer.com/pricing
security.ssoSSOcompany stated2026-09-03turbopuffer.com/docs/security
Security across Vector DatabasesTurbopuffer ranked in place · tap through for each read
CompanySecurity readFacts
PineconeEnterprise-grade15
ZillizCompliance-ready14
QdrantCompliance-ready13
Turbopuffer this recordCompliance-ready12
WeaviateCompliance-ready10
ChromaCompliance-ready8
TopKBaseline security5
ActiveloopBaseline security4
EpsillaBaseline security4
VectaraCompliance-ready3

No observed security facts yet for KDB.AI, LanceDB, Marqo, Milvus, MyScale and Vespa.

Get security for turbopuffer.com via API / MCPevery field dated and sourced
RESTopen tier
GET https://api.bixel.com/v1/companies/turbopuffer.com/facts?dimension=security

{
  "data": {
    "facts": [
      {
        "key": "security.audit-logs",
        "value": true,
        "provenance": "company_stated",
        "as_of": "2026-09-03",
        "source_url": "turbopuffer.com/docs/security"
      },
      {
        "key": "security.cert.soc2",
        "value": true,
        "provenance": "company_stated",
        "as_of": "2026-09-03",
        "source_url": "turbopuffer.com/pricing"
      },
      {
        "key": "security.cert.soc2-type-ii",
        "value": true,
        "provenance": "company_stated",
        "as_of": "2026-09-03",
        "source_url": "turbopuffer.com/docs/security"
      },
      {
        "key": "security.data_residency",
        "value": "global",
        "provenance": "company_stated",
        "as_of": "2026-09-03",
        "source_url": "turbopuffer.com/docs/security"
      },
      "…"
    ]
  }
}
MCPfor agents
# any MCP client (Claude, agents)
const record = await bixel.get_company_facts({ domain: "turbopuffer.com", dimension: "security" })

# returns the security record above,
# each value with its source_url + as_of,
# ready to reason over
Build on the company record. One key, REST + MCP, every signal dated and sourced back to the page it came from.

Public record, read from companies' own pages and boards. Every fact dated and sourced; provenance (observed vs company stated) shown inline.