Security architecture
Self-hosted infrastructure changes the security model entirely.
Self-hosted guarantees
Because Layerr runs on your own infrastructure, the security guarantees are different from a SaaS product. Your data never leaves your perimeter unless you choose to send it to an LLM provider. There is no multi-tenant database to breach. There is no Layerr admin panel with access to your prompts. The attack surface is your own infrastructure, which you already control.
API key handling
API keys are stored encrypted at rest in your local configuration. They are never logged in plaintext. They are never transmitted to Layerr servers because Layerr does not operate servers that receive your runtime data. Keys are used only to authenticate with the LLM providers you configure.
No proxy, no middleman
Layerr is not a proxy service. Your traffic goes directly from your infrastructure to the LLM providers you configure. The routing decision happens locally. The request is forwarded from your machine to Anthropic, OpenAI, or whichever provider you selected. There is no Layerr server sitting in the middle.
Threat models we address
The current architecture addresses: prompt interception by a third-party middleware, vendor lock-in through proprietary APIs, and data residency concerns by keeping everything on your infrastructure. It does not yet address: formal compliance certifications, advanced threat detection, or enterprise-grade access controls. These are on the roadmap as the product matures beyond alpha.
What is still in progress
Layerr is v0.8.0-alpha. Formal SOC 2, ISO 27001, and compliance work are not yet in scope. They will be added as the product matures and as enterprise customers require them. The security architecture described above is the foundation, not the finished product. If you have specific requirements, we want to hear about them.
