Internal access

We enforce strict controls on employee access to our production systems, customer environments, and data.

Cloud console access

We require multifactor authentication to access core infrastructure consoles like AWS and GCP. Lightning AI has policies to minimize the use of explicit credentials, like passwords or API keys. Only designated team members can handle exception requests for new AWS IAM roles or policies.

Production system access

Lightning AI employees can access the production system only in specific cases, like emergency fixes. Access is controlled by a Lightning AI system that validates and enforces policy checks, requiring VPN connection and multifactor authentication through our single sign-on solution.

Separation of duties

Lightning AI's security standards require the separation of duties. For example, we centralize authentication and authorization to ensure that deciding who should have access is separate from granting that access.

Least privilege

Lightning AI prioritizes least privilege access for both internal and production systems. This approach is built into our policies and procedures. For example, most customers control whether Lightning AI employees can access their workspace, with manual checks applied before granting access.