// Trust & Security Report
Grid.ai, Inc. (dba Lightning AI)
Lightning AI is a comprehensive cloud AI platform with AI Studio (collaborative GPU notebooks), AI Notebooks, GPU Clusters, Model APIs, Batch Jobs, and Inference services. Built by the creators of PyTorch Lightning.
Certifications held
3
Maturity
Growth
Trains on your data
Unknown
Trust center
Yes
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on lightning.ai“Homepage enterprise section lists 'SOC2 & HIPAA compliance' under 'Loved by developers. Trusted by IT.' Dedicated vendor doc page https://lightning.ai/docs/security/compliance/soc2-type2 loads with page title 'SOC 2 Type II | Lightning AI', confirming Type II attestation on the vendor's own domain.”
Verify on lightning.ai“Homepage enterprise section lists 'SOC2 & HIPAA compliance' and displays a 'HIPAA' badge. Dedicated vendor doc page https://lightning.ai/docs/security/compliance/hipaa-compliance loads with page title 'HIPAA | Lightning AI'. Note: BAA availability/terms not confirmed in public docs; treat as HIPAA-compliance posture rather than a signed BAA guarantee.”
Verify on lightning.ai“Homepage displays a 'GDPR' badge in the enterprise section. Privacy policy names Grid.ai, Inc. dba 'Lightning AI' as controller for European data protection purposes and appoints VeraSafe Ireland Ltd (Cork, Ireland) as its EU representative under GDPR Article 27, with GDPR data-subject rights and privacy@lightning.ai contact documented.”
> Show 3 unconfirmed / not-held certifications
source: lightning.aiNo public evidence found. Compliance page exists but specific ISO 27001 certification not mentioned in available documentation or search results.
source: lightning.aiNo public evidence found. No mention in available documentation.
source: lightning.aiNo public evidence found. Not mentioned in security or compliance documentation.
// Privacy & AI training
Trains on customer data
Not stated
Data processing agreement
Offered
Data region
Multiple options available. Customers can select data residency location. Lightning AI supports AWS, GCP, and private cloud deployments.
Policy unclear. Lightning AI provides training and inference services for customer models, but explicit policy on whether Lightning AI trains its own models on customer data or uses it for model improvement not found in publicly available documentation. Terms reference 'operational purposes' only for administrative access.
// Security controls
Encryption at Rest
AES-256 encryption for all volume (disk) data on Lightning AI Studios; AWS KMS support for enterprise customers managing S3 buckets
lightning.aiEncryption in Transit
Industry-standard TLS encryption. Specific protocol versions not documented in publicly available materials.
lightning.aiAuthentication & Access Control
Multi-Factor Authentication (MFA) available via SSO with Google and GitHub; role-based access controls (RBAC); fine-grained data access controls; API key authentication
lightning.aiAudit Logging
Audit logs available for enterprise deployments; activity logging for compliance tracking
lightning.aiNetwork Security
VPC support; private cloud deployment options; Bring Your Own Cloud (BYOC) option; network isolation controls
lightning.aiVulnerability Management
No specific public disclosure about vulnerability disclosure program or penetration testing frequency found
lightning.ai// Products & data scope
data: User code, models, datasets processed on platform
Collaborative GPU workspace with persistent storage, AI-assisted debugging and code generation
data: Jupyter notebooks, datasets, analysis outputs
Persistent GPU notebooks with collaborative features and AI assistance
data: Training data, model weights, computational outputs
Managed training/inference clusters; supports SLURM, Kubernetes, or Lightning's multi-cloud orchestration
data: API inputs/outputs, model parameters, inference logs
Pay-per-token APIs for serving models; supports custom models and pre-built options; OpenAI-compatible API format
data: Batch input data, computation results
Run batch work on 1000s of GPUs with fractional, pay-as-you-go pricing
// What to watch
- SOC 2 Type II page exists but full audit report details could not be verified due to dynamic page rendering; certification claimed on homepage but specific audit period/validity date not confirmed
- HIPAA compliance claimed but specific BAA availability and terms not confirmed in publicly available documentation
- AI training data policy is unclear; Lightning AI provides training services but does not explicitly state whether it trains on customer data or uses customer interactions for model improvement
- Identity verified: Grid.ai, Inc. confirmed as legal entity operating as Lightning AI; founded by PyTorch Lightning creators (William Falcon, CEO); not a host-vs-vendor cert issue
- ISO 27001 and other ISO standards not found in public documentation despite comprehensive security docs site; recommend direct inquiry for current certification status
- Data residency options clearly documented, but specific data centers and redundancy/replication policies not detailed in available materials
// At a glance
Pricing model
Freemium + consumption-based. Free plan ($0), Pro ($50/month), Teams ($140/month), Enterprise (custom). Pay-per-token for Model APIs; hourly rates for GPU compute.
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Grid.ai, Inc. (dba Lightning AI)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
lightning.ai