Trust Center | 信任中心

1. 运营主体 / Operating Entity

VecminDB 由上海灵心智算智能科技有限公司（Shanghai Lingxin Intelligent Technology Co., Ltd.，ICP 备案号：沪ICP备2025120712号-1）开发与运营。本页面汇总安全架构、数据驻留、合规材料与子处理者信息，供安全评估与采购尽调使用。

VecminDB is developed and operated by Shanghai Lingxin Intelligent Technology Co., Ltd. (ICP filing no. 沪ICP备2025120712号-1). This page consolidates our security architecture, data residency model, compliance materials and sub-processor list for security reviews and procurement due diligence.

2. 架构即安全 / Security by Architecture 已内建

VecminDB 是自托管的单容器引擎。以下能力内置于产品本身，不依赖任何外部服务：

零外部调用：内置 ONNX 运行环境与 BGE-M3 端侧嵌入模型，运行期间不调用任何外部 Embedding / LLM API，支持 100% 物理断网（air-gapped）部署；
引擎层租户隔离：Sovereignty Token 在引擎层实现租户 / 集合级硬隔离，跨租户访问需显式授权；
防篡改审计链：写操作经由 HMAC-SHA256 签名的审计日志记录（SovereigntyAuditor），支持事后追溯与完整性校验；
硬件绑定许可：基于 Ed25519 签名与硬件指纹（HAI）的离线许可校验，防止许可漂移与滥用；
对抗噪声拦截：3-Sigma 异常值裁剪哨兵拦截对抗性注入向量；差分隐私联邦提纯（DP-Federated PCA，ε=0.5, δ=1e-5）在跨 Agent 共享时不暴露原始数据。

VecminDB is a self-hosted, single-container engine. The following capabilities are built into the product itself and do not depend on any external service:

Zero external calls: embedded ONNX runtime and BGE-M3 on-device embedding model — no external Embedding / LLM API calls at runtime; supports fully air-gapped deployment;
Engine-level tenant isolation: Sovereignty Tokens enforce hard tenant / collection-level isolation inside the engine, with explicit authorization for any cross-tenant access;
Tamper-evident audit chain: write operations are recorded in an HMAC-SHA256 signed audit log (SovereigntyAuditor) for retrospective tracing and integrity verification;
Hardware-bound licensing: offline license verification via Ed25519 signatures and the HAI hardware fingerprint;
Adversarial noise filtering: a 3-Sigma outlier pruning sentinel blocks adversarial injected vectors; DP-Federated PCA (ε=0.5, δ=1e-5) enables cross-agent sharing without exposing raw data.

完整技术细节见安装部署与运维指南与产品指南。

Full technical details are documented in the Installation & Ops Guide and Product Guide.

3. 数据驻留与主权 / Data Residency & Sovereignty 架构属性

您的记忆数据（向量与文本）不经过我们的任何基础设施。引擎完整运行在您自己的边界内——您自己的服务器、VPC 或物理隔离内网。我们默认无法访问、也无法被要求交出您的业务数据。

与我们所维护的基础设施发生交集的数据仅限于：① 许可服务（激活邮箱、硬件指纹），用于许可签发与防盗版校验；② 本官网的匿名交互统计（见隐私政策）。

Your memory data (vectors and text) never passes through our infrastructure. The engine runs entirely inside your own boundary — your servers, your VPC, or your air-gapped intranet. We have no default access to, and cannot be compelled to surrender, your business data.

The only data that touches infrastructure we operate: ① licensing (activation email, hardware fingerprint) for license issuance and anti-abuse verification; ② anonymous website analytics (see our Privacy Policy).

4. 合规材料 / Compliance Materials

隐私政策：PIPL 要素齐备，并含 GDPR 附录（处理法律依据、Art. 15–21 数据主体权利、国际传输 SCC 机制、EU/UK 代表、Cookie 与同意）；
DPA（数据处理协议）：隐私政策第 5 节含 DPA 条款，完整 DPA 文本可经邮件索取；
服务条款 · 退款政策（30 天，除外情形见页内）；
源码托管：Enterprise 客户可在签署 NDA 后启用源码托管安排；
架构安全评审：可按需（NDA）安排与您安全团队的联合评审。

Privacy Policy: PIPL-complete, including a GDPR addendum (legal bases, Art. 15–21 data subject rights, international transfer SCC mechanism, EU/UK representative, cookies & consent);
DPA: a DPA clause is embedded in §5 of the Privacy Policy; the full DPA text is available on request;
Terms of Service · Refund Policy (30 days; exclusions on page);
Source-code escrow: available for Enterprise customers under NDA;
Architecture security review: joint review sessions with your security team available on request (NDA).

5. 子处理者清单 / Sub-processor List

我们运营的基础设施仅用于本官网与许可服务，不承载任何客户业务数据：

2Checkout（Verifone）——支付处理（仅交易信息，卡号不经我方系统）；
Railway——官网与许可服务（license.lingxinmind.com）的应用托管；
Cloudflare——官网 CDN、DNS 与邮件转发（Email Routing）。

Infrastructure we operate serves only this website and the licensing service — no customer business data:

2Checkout (Verifone) — payment processing (transaction data only; card numbers never touch our systems);
Railway — application hosting for the website and the licensing service (license.lingxinmind.com);
Cloudflare — website CDN, DNS and email routing (Email Routing).

6. 认证与评估路线图 / Certification & Assessment Roadmap 路线图

我们如实披露当前状态，并按以下路线图推进（不做过期或无依据的宣称）：

第三方渗透测试：尚未发布公开报告；Enterprise 客户可在 NDA 下协商联合测试或评审安排；
ISO 27001 / SOC 2：尚未取得，已列入规划；
信创适配：Enterprise 版支持信创架构部署（详见定价页）。

We disclose our current status honestly and maintain the following roadmap (no outdated or unsubstantiated claims):

Third-party penetration testing: no public report yet; joint testing or review arrangements can be discussed with Enterprise customers under NDA;
ISO 27001 / SOC 2: not yet obtained; on the roadmap;
Xinchuang (信创) readiness: Enterprise edition supports Xinchuang architecture deployments (see pricing).

7. 漏洞报告与材料索取 / Reporting & Requests

发现安全问题请通过专用邮箱 security@lingxinmind.com 向我们报告，我们承诺在 5 个工作日内确认收悉。索取安全白皮书、DPA 全文或安排架构评审，请通过 contact@lingxinmind.com 邮件说明您的机构与需求。

To report a security issue, use our dedicated mailbox security@lingxinmind.com — we acknowledge reports within 5 business days. To request the security whitepaper, the full DPA, or an architecture review, email contact@lingxinmind.com with your organization and requirements.