(01)
Security
We read metadata. Your models stay where they are.
SITE 02 · BASIN B
18,560 GPUS · 94% BUSY
Sentinel-2 L2A · ink pass
(02)
Security and control
Rules you can read. A record you can prove.
policies/eu-residency.yaml
policy: eu-residency
applies_to: datasets.tag == “eu”
allow_regions:
- eu-north-1
- eu-west-2
on_violation: hold
notify: owner, #platform
approver: security-oncall
Audit log · last 6
14:52:08
moved run-7731 → pool-b
14:47:31
held run-7742 (policy 41)
14:31:02
scaled pool-c +64
14:12:44
cap warning team-vision
13:58:19
checkpoint run-7731
13:40:00
maintenance us-west-1
Self-hosted option
Run the whole control plane inside your own network.
Metadata only
Weights and datasets never leave your clusters.
One-click rollback
Every policy change can be undone, and the undo is logged.
(03)
Practices
How we handle what we hold.
[01]
Read-only first
Every connection starts read-only. Write access is a separate, logged grant.
[02]
Encrypted everywhere
TLS in transit, per-tenant keys at rest, keys you can rotate.
[03]
Least privilege
Scoped tokens per cluster. Nothing shared between tenants.
[04]
Your own network
Sovereign runs the full control plane inside your walls.
[05]
Logged and exportable
Every action by people and by Overhead lands in your audit log.
[06]
Disclosure
Found a problem? Write to security@overhead.example and we reply in a day.
(04)
Regions
Six regions. One inventory.
+
EU-NORTH-1
Nominal
Northern Sweden
Power
48 MW
GPUs
6,144
Cooling
Liquid
+
EU-WEST-2
Nominal
Western Ireland
Power
32 MW
GPUs
4,096
Cooling
Air + rear door
+
US-EAST-2
Nominal
Ohio valley
Power
60 MW
GPUs
8,192
Cooling
Liquid
+
US-WEST-1
Maintenance window
High desert, Oregon
Power
40 MW
GPUs
5,120
Cooling
Evaporative
+
AP-SOUTH-1
Nominal
Western India
Power
24 MW
GPUs
3,072
Cooling
Liquid
+
ME-CENTRAL-1
Nominal
Arabian plateau
Power
36 MW
GPUs
4,608
Cooling
Liquid
Next step
Need answers for your security review?
We will fill in your questionnaire and join the call.