Turbopuffer

Turbopuffer Inc.·Turbopuffer.com
Security Posture

Compliance-ready

As of October 30, 2026, Turbopuffer's security: Holds SOC 2 and SOC 2 Type II, plus CCPA/GDPR, and 7 controls incl. Audit Logs, Encryption At REST, and Encryption In Transit.

Backed by 12 dated facts
Every value derives from a dated, sourced capture — open any fact for its source.
Certifications
SOC 2SOC 2 Type II
Privacy
CCPAGDPR
Controls
Audit LogsEncryption At RESTEncryption In TransitIP AllowlistingPrivate LinkPrivate NetworkingSSO
Details
Data residencyGlobal
Security Change Historydated events · values unlock with a key
Security signal removed: Pen Testing · high significance
Security signal removed: VPC Peering · high significance
Security signal removed: HIPAA · high significance
Security signal added: VPC Peering · high significance
Security signal removed: VPC Peering · high significance
Security signal added: Data Residency · high significance
Security signal added: IP Allowlisting · high significance
Security signal added: Pen Testing · high significance
Every security fact on this pagekey · value · provenance · dated · sourced
FactValueProvenanceAs ofSource
security.audit-logsAudit Logscompany stated2026-10-30turbopuffer.com/docs/security
security.cert.soc2SOC 2company stated2026-10-30turbopuffer.com/pricing
security.cert.soc2-type-iiSOC 2 Type IIcompany stated2026-10-30turbopuffer.com/docs/security
security.data_residencyglobalcompany stated2026-10-30turbopuffer.com/docs/security
security.encryption-at-restEncryption At RESTcompany stated2026-10-30turbopuffer.com/docs/security
security.encryption-in-transitEncryption In Transitcompany stated2026-10-30turbopuffer.com/docs/security
security.ip-allowlistingIP Allowlistingcompany stated2026-10-30turbopuffer.com/docs/security
security.privacy.ccpaCCPAcompany stated2026-10-30turbopuffer.com/docs/security
security.privacy.gdprGDPRcompany stated2026-10-30turbopuffer.com/docs/security
security.private-linkPrivate Linkcompany stated2026-10-30turbopuffer.com/docs/security
security.private-networkingPrivate Networkingcompany stated2026-10-30turbopuffer.com/use-cases
security.ssoSSOcompany stated2026-10-30turbopuffer.com/docs/security
Security across Vector DatabasesTurbopuffer ranked in place · tap through for each read

No observed security facts yet for KDB.AI, Marqo, Milvus, MyScale and TopK.

IdentityBixel ID · free forever
Bixel IDbxc_ywdsctsc82hfbrandID in service · identity is free forever · permalink
Operated by

No registered company joined yet. Would resolve with: a registry identifier for the entity; a legal page on the site naming the registered company.

Registry identifiers

None on record.

Published identifiers

None read from the company's own pages yet.

Get security for turbopuffer.com via API / MCPevery field dated and sourced
RESTopen tier
GET https://api.bixel.com/v1/companies/turbopuffer.com/facts?dimension=security

{
  "data": {
    "facts": [
      {
        "key": "security.audit-logs",
        "value": true,
        "provenance": "company_stated",
        "as_of": "2026-10-30",
        "source_url": "turbopuffer.com/docs/security"
      },
      {
        "key": "security.cert.soc2",
        "value": true,
        "provenance": "company_stated",
        "as_of": "2026-10-30",
        "source_url": "turbopuffer.com/pricing"
      },
      {
        "key": "security.cert.soc2-type-ii",
        "value": true,
        "provenance": "company_stated",
        "as_of": "2026-10-30",
        "source_url": "turbopuffer.com/docs/security"
      },
      {
        "key": "security.data_residency",
        "value": "global",
        "provenance": "company_stated",
        "as_of": "2026-10-30",
        "source_url": "turbopuffer.com/docs/security"
      },
      "…"
    ]
  }
}
MCPfor agents
# any MCP client (Claude, agents)
const record = await bixel.get_company_facts({ domain: "turbopuffer.com", dimension: "security" })

# returns the security record above,
# each value with its source_url + as_of,
# ready to reason over
Build on the company record. One key, REST + MCP, every signal dated and sourced back to the page it came from.

Public record, read from companies' own pages and boards. Every fact dated and sourced; provenance (observed vs company stated) shown inline.