Bixel

Turbopuffer

Turbopuffer Inc.·Turbopuffer.com
Security Posture

Compliance-ready

As of July 20, 2026, Turbopuffer's security: SOC 2 Type II, HIPAA, GDPR, and CCPA are all stated, with 10 controls including encryption at rest, encryption in transit, and SSO; healthcare and regulated-data buyers clear procurement without needing to negotiate baseline controls.

High confidence · 17 dated facts
Corroborated across multiple dated, sourced facts.
Certifications
SOC 2SOC 2 Type IIHIPAA
Privacy
GDPRCCPA
Controls
Encryption At RESTEncryption In TransitSSOIP AllowlistingPrivate LinkVPC PeeringAudit LogsPen TestingData ResidencyPrivate Networking
Details
Data residencyGlobal
Security Change Historydated events · values unlock with a key
Security signal added: Data Residency · high significance
Security signal added: IP Allowlisting · high significance
Security signal added: Pen Testing · high significance
Every security fact on this pagekey · value · provenance · dated · sourced
FactValueProvenanceAs ofSource
security.audit-logsAudit Logscompany stated2026-07-20turbopuffer.com/docs/security
security.cert.gdprGDPRcompany stated2026-07-20turbopuffer.com/pricing
security.cert.hipaaHIPAAcompany stated2026-07-20turbopuffer.com/docs/security
security.cert.soc2SOC 2company stated2026-07-20turbopuffer.com/pricing
security.cert.soc2-type-iiSOC 2 Type IIcompany stated2026-07-20turbopuffer.com/docs/security
security.data_residencyglobalcompany stated2026-07-20turbopuffer.com/docs/security
security.data-residencyData Residencycompany stated2026-07-20turbopuffer.com/docs/security
security.encryption-at-restEncryption At RESTcompany stated2026-07-20turbopuffer.com/docs/security
security.encryption-in-transitEncryption In Transitcompany stated2026-07-20turbopuffer.com/docs/security
security.ip-allowlistingIP Allowlistingcompany stated2026-07-20turbopuffer.com/docs/security
security.pen-testingPen Testingcompany stated2026-07-20turbopuffer.com/docs/security
security.privacy.ccpaCCPAcompany stated2026-07-20turbopuffer.com/docs/security
security.privacy.gdprGDPRcompany stated2026-07-20turbopuffer.com/docs/security
security.private-linkPrivate Linkcompany stated2026-07-20turbopuffer.com/docs/security
security.private-networkingPrivate Networkingcompany stated2026-07-20turbopuffer.com/pricing
security.ssoSSOcompany stated2026-07-20turbopuffer.com/docs/security
security.vpc-peeringVPC Peeringcompany stated2026-07-20turbopuffer.com/docs/security
Security across Vector DatabasesTurbopuffer ranked in place · tap through for each read
CompanySecurity readFacts
PineconeCompliance-ready19
Turbopuffer this recordCompliance-ready17
ZillizCompliance-ready15
QdrantBaseline security12
VectaraEnterprise-grade12
TopKCompliance-ready8
ActiveloopBaseline security5
EpsillaBaseline security3

No observed security facts yet for Chroma, KDB.AI, LanceDB, Marqo, Milvus, MyScale, Vespa and Weaviate.

Get security for turbopuffer.com via API / MCPevery field dated and sourced
RESTopen tier
GET https://api.bixel.com/v1/companies/turbopuffer.com/facts?dimension=security

{
  "data": {
    "facts": [
      {
        "key": "security.cert.soc2-type-ii",
        "value": true,
        "provenance": "company_stated",
        "as_of": "2026-07-20",
        "source_url": "turbopuffer.com/docs/security"
      },
      {
        "key": "security.cert.hipaa",
        "value": true,
        "provenance": "company_stated",
        "as_of": "2026-07-20",
        "source_url": "turbopuffer.com/docs/security"
      },
      {
        "key": "security.privacy.gdpr",
        "value": true,
        "provenance": "company_stated",
        "as_of": "2026-07-20",
        "source_url": "turbopuffer.com/docs/security"
      },
      {
        "key": "security.privacy.ccpa",
        "value": true,
        "provenance": "company_stated",
        "as_of": "2026-07-20",
        "source_url": "turbopuffer.com/docs/security"
      },
      "…"
    ]
  }
}
MCPfor agents
# any MCP client (Claude, agents)
const record = await bixel.get_company_facts({ domain: "turbopuffer.com", dimension: "security" })

# returns the security record above,
# each value with its source_url + as_of,
# ready to reason over
Build on the company record. One key, REST + MCP, every signal dated and sourced back to the page it came from.

Public record, read from companies' own pages and boards. Every fact dated and sourced; provenance (observed vs company stated) shown inline.