Trust
What a reviewer can actually check.
If your job is to decide whether Vantio belongs inside your environment, start here. Every claim below is either something you can verify yourself once the software is installed, or something we are telling you plainly that we have not done yet. There is no third category.
What we do with your data
Vantio records security and connection metadata, not prompts or completions. That is a product property, not a setting you have to remember to turn on. There is no prompt warehouse to breach, subpoena, or accidentally train on.
Phantom Engine records the decision it made and why, so you can answer whether an action was permitted without keeping the content of the request. Phantom Engine keeps host-level records on the Linux machines you enroll. Enterprise correlates all of it into evidence a reviewer can read months later.
Your authority stays yours
Your agents. Your infrastructure. Your authority. Vantio makes it enforceable. We are the enforcement mechanism for decisions you make, and we designed the product so you can walk away from us without losing what you built.
- You own the policy. Vantio does not decide what your agents are for.
- You set the level of autonomy, and you can turn it down at any time.
- You can revoke a capability, and the enforcement point stops honoring it.
- You can export the evidence and take it with you.
- There is no hidden Vantio remote override on your infrastructure.
- Independent safety systems keep the authority they were designed with. Vantio does not replace an interlock, an e-stop, or a local controller.
Where coverage ends
A control you believe in but do not have is worse than no control at all, so here is the honest edge of what Vantio reaches.
Reachability is not authority.
Vantio holds no certifications today. Certification alignment is not the same as certification held, and authorization programs like FedRAMP and CMMC run as separate external processes.
We run the same products on infrastructure we operate.
We run Optics and Phantom Engine on the agent infrastructure we operate, and we publish clearly labeled operational evidence. That shows how we use the system.
This is evidence from infrastructure Vantio operates. It is not a customer deployment, it is not an independent audit, and it does not stand in for validation on infrastructure Vantio does not operate.
Where to go next
Each of these answers a different question a review usually asks. Take them in whatever order your process needs.
Security
Where to send a finding, what is in scope, and what happens after you send it.
Compliance
Framework-by-framework status, what evidence you can export today, and which programs are still open.
Product evidence
The operational numbers from the environment Vantio runs its own company on, labeled for what they are.
Privacy
How Vantio handles personal data on the website and in the products.
Terms
The terms that govern using Vantio software and services.
Compatibility matrix
Every runtime, framework, and host combination with its real status. Named residuals stay named.
Questions we get during review
- Does Vantio store agent prompts or completions?
- Vantio records security and connection metadata, not prompts or completions.
- Can a customer revoke a capability after it has been issued?
- You can revoke a capability, and the enforcement point stops honoring it.
- Which machines can Phantom Engine control?
- Phantom Engine applies only to the Linux hosts you enroll. Windows and macOS host control are not available.
- Does Vantio hold any certifications today?
- Vantio holds no certifications today. Certification alignment is not the same as certification held, and authorization programs like FedRAMP and CMMC run as separate external processes.
- Is the evidence Vantio publishes from a customer deployment?
- This is evidence from infrastructure Vantio operates. It is not a customer deployment, it is not an independent audit, and it does not stand in for validation on infrastructure Vantio does not operate.
Bring us the environment you actually have
If something here does not line up with your requirements, tell us which part. We would rather name a gap early than discover it during your assessment. Optics is free if you would like to see what your agents are doing before you talk to anyone.