Snapshot 227033
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Guide Introduction to Modal Getting started Functions Functions Invocation methods Function lookups Container lifecycle management Parametrized Functions Dynamic configuration Sandboxes Sandboxes Running commands Networking and security File access Snapshots Exit Snapshots BetaPricing and resources Sidecars BetaSecret injection BetaEndpoints Endpoints Supported models Shared Endpoints Dedicated Endpoints Endpoint candidates Endpoint integrations Training Quickstart Tinker-compatible API BetaMulti-node training Images Defining Images Using existing container images Named images Fast pull from registry GPUs and other resources GPU acceleration Using CUDA on Modal Configuring CPU, memory, and disk Scaling out Scaling out Input concurrency Batch processing Job queues Dynamic batching Multi-node Clusters Deployment Apps, Functions, and entrypoints Managing deployments Continuous deployment Scheduled Functions HTTP Applications Servers Sticky Sessions Web Functions Streaming endpoints Web Function URLs Request timeouts Proxy Tokens Networking Tunnels Proxies BetaCluster networking Data sharing and storage Passing local data Volumes Storing model weights Cloud bucket mounts Dicts Queues Dataset ingestion Secrets and environment variables Secrets Environment variables Performance Cold start performance Memory Snapshots High-performance LLM inference Reliability and robustness Failures and retries Preemption Timeouts GPU health Troubleshooting Security and privacy Security and privacy Data residency Customer-supplied encryption keys AlphaAudit logs Integrations Using OIDC to authenticate with external services Connecting Modal to your Datadog account Connecting Modal to your OpenTelemetry provider Slack notifications BetaWorkspace & account settings Workspaces Environments Service users User groups Role-Based Access Control (RBAC) Billing Network egress billing Budgets Identity and provisioning Okta SSO Microsoft Entra SSO Google Workspace SSO Custom SAML SSO SCIM Integration Other topics Feature maturity Restricted Functions JavaScript/Go SDKs BetaModal 1.0 migration guide File and project structure Developing and debugging Jupyter notebooks Asynchronous API usage Global variables Region selection GPU Metrics Search syntax Security and privacy at Modal This page outlines Modal’s security and privacy commitments. Our Trust Center provides compliance documentation, including our SOC 2 Type II report, our list of subprocessors, and details of our security controls. Information security program Our information security (InfoSec) program covers three practice areas: application security, corporate security, and network and infrastructure security. Application security (AppSec) AppSec covers how we build, test, review, and deploy the Modal platform. We build our software using memory-safe programming languages, including Rust (for our worker runtime and storage infrastructure) and Python (for our API servers and Modal client). Software dependencies are automatically audited for known vulnerabilities. We make decisions that minimize our attack surface. Most interactions with Modal are well-described in a gRPC API, and occur through modal, our open-source command-line tool and Python client library. We have automated synthetic monitoring test applications that continuously check for network and application isolation within our runtime. We force HTTPS (TLS) for all services, including our public website and the Dashboard. Our client library connects to Modal’s servers over TLS and verifies TLS certificates on each connection. Your data is encrypted in transit and at rest. All public Modal APIs use TLS 1.3. Internal code reviews are performed using a PR-based development workflow, and we engage external penetration testing firms to assess our software security. Corporate security (CorpSec) CorpSec covers how our employees access internal systems. Access to internal systems requires single sign-on (SSO) through our identity provider. Phishing-resistant multi-factor authentication (MFA) is required for all employee accounts. We regularly audit access to internal systems. Employee laptops are enrolled in mobile device management (MDM) with full disk encryption enforced. Network and infrastructure security (InfraSec) InfraSec covers how we secure the infrastructure that runs your workloads. We continuously monitor platform logs and metrics through third-party observability providers. Each container runs in its own sandbox, isolated from the host, using primitives like gVisor or microVMs. We run business continuity and security incident exercises every year. Vulnerability remediation We remediate vulnerabilities in Modal’s systems within the timeframes below, measured from when a fix becomes available. Severity is based on the CVSS rating of the vulnerability and our assessment of its impact on Modal. Severity timeframes Critical: 24 hours High: 1 week Medium: 1 month Low: 3 months Informational: 3 months or longer Bug bounty program We welcome responsible disclosure from the security community and run a private bug bounty program through HackerOne. To participate, email security@modal.com with your HackerOne username and we will send an invite. When performing security research, you must use a Modal Workspace whose name ends in -H1-<username>, where <username> is your HackerOne username. Data privacy This section covers how long each type of data is kept, which products retain no data at all, and where your data is stored. Data retention Retention varies by product; the table below shows how long each type of data is retained. All stored data is encrypted at rest. Data Product Retention Inputs and outputs Functions (.remote, .spawn, .map, Web Functions, Scheduled Functions) Up to 7 days, then deleted Request and response payloads Servers, Dedicated Endpoints, and Shared Endpoints Not stored — proxied directly to the serving container App and container logs Functions, Sandboxes, Servers, Dedicated Endpoints Plan-dependent: 1 day on Starter, 30 days on Team, configurable on Enterprise (see pricing) Audit logs Workspace (Enterprise) Per Enterprise contract (see Audit logs) Files Volumes, Images Persistent until you delete them Function and Server memory snapshots Functions, Servers 30 days after creation Sandbox memory snapshots Sandboxes 7 days after creation Filesystem snapshots Sandbox filesystem snapshots 30 days after creation (configurable; stored as Images) Directory snapshots Sandbox directory snapshots 30 days after creation (configurable) Entries Dicts 7 days after last read or write Partitions Queues Configurable per-partition TTL (default 24 hours) App, Function, and container metadata All products Stored for the lifetime of your account Note While we store app logs and metadata as part of operating the platform, we access them only with your permission, to help troubleshoot an issue. Zero data retention Servers, Dedicated Endpoints, and Shared Endpoints have zero data retention. Request and response payloads are never written to disk and pass through Modal only as in-flight network traffic. For Servers, anything written to stdout or stderr is retained as container logs for your plan’s log retention period, so ensure that your code does not log request or response payloads. Data residency See our data residency guide for where each type of data is stored and the controls available for residency requirements. Shared responsibility model Modal prioritizes the integrity, security, and availability of customer data. Under our shared responsibility model, you also have responsibilities in the areas below. Area Modal Customer Access and secrets Provides access controls, including SSO, SCIM, API tokens, and RBAC, and Secrets management for storing credentials. Manage the identities in your Workspace, assign roles, and rotate and remove API tokens. Own the contents and rotation of your Secrets. Encryption and network security Encrypts data in transit with TLS 1.3 and at rest. Decide which endpoints you expose and how they are authenticated. Apply any additional encryption your data requires, such as encrypting sensitive fields before they reach Modal. Vulnerabilities Patches the platform and runtimes within our severity timeframes and audits our dependencies for known vulnerabilities. Patch your Images, dependencies, and code. Untrusted code Provides isolation primitives for running untrusted code through Restricted Functions and Sandboxes. Run untrusted code, such as LLM-generated or end-user-submitted code, using those primitives and with guardrails such as egress restrictions, resource limits, and timeouts. Keep Secrets and credentials out of untrusted workloads. Data lifecycle Ensures the durability of managed storage and applies our retention and deletion policies. Maintain backups of the data you store in Modal and routinely verify their integrity. Operations Operates the platform for high availability, monitors it, and responds to platform incidents. Monitor your applications and design for failover. Compliance Makes our audit reports and control documentation available on our Trust Center. Determine which laws and regulations apply to your organization and your data, and configure and use Modal to meet them. Security features We provide security features across our products to help you secure your workloads, such as single sign-on, Role-Based Access Control (RBAC), Sandbox network access controls, audit logs, and customer-supplied encryption keys. Product Features Workspace Block unauthenticated endpoints, Role-Based Access Control (RBAC), Proxies (static egress IPs) Functions Restricted Functions Sandboxes Outbound access control, Inbound access control Identity Okta SSO, Microsoft Entra SSO, Google Workspace SSO, Custom SAML SSO, SCIM integration, OIDC integration Observability Audit logs, Datadog integration, OpenTelemetry integration Encryption Customer-supplied encryption keys Compliance standards System and Organization Controls (SOC) 2 Type II For our latest SOC 2 Type II audit report, please visit our Trust Center to request access. General Data Protection Regulation (GDPR) A Data Processing Addendum (DPA) is available on our Trust Center. Health Insurance Portability and Accountability Act (HIPAA) Contact sales@modal.com to get started with HIPAA on the Enterprise plan. The following products are out of scope and should not be used for protected health information (PHI): Out of scope for PHI Notes Volumes v1 Use Volumes v2 instead Images Excluding Filesystem and Directory Snapshots Memory Snapshots — User code — Contact security@modal.com Security and privacy at ModalInformation security programVulnerability remediationSeverity timeframesBug bounty programData privacyData retentionZero data retentionData residencyShared responsibility modelSecurity featuresCompliance standardsSystem and Organization Controls (SOC) 2 Type IIGeneral Data Protection Regulation (GDPR)Health Insurance Portability and Accountability Act (HIPAA)Contact