// Trust & Security Report
Numerai Inc.
Crowdsourced AI/ML data-science tournament platform (numer.ai) where participants build models on obfuscated financial data to predict markets; feeds an affiliated hedge fund (Numerai Hedge Fund / Numerai GP LLC, numerai.fund) open only to accredited/institutional investors. Sub-products include Numerai Signals (external-data tournament) and Numerai Crypto. Participants stake the NMR cryptocurrency on submitted models.
Certifications held
0
Maturity
Growth
Trains on your data
Unknown
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
> Show 8 unconfirmed / not-held certifications
source: numer.aiNo public evidence: no trust center, security page, or SOC 2 mention found on numer.ai, docs.numer.ai, or the Numerai GitHub org after direct search and fetch attempts.
source: numer.aiNo public evidence: no ISO 27001 mention found on any vendor-controlled page (numer.ai, docs.numer.ai, github.com/numerai).
source: numer.aiNo public evidence located. A Terms of Service page exists at numer.ai/terms (referenced in Numerai's own docs), but it is rendered client-side via JavaScript and its text could not be retrieved through automated fetch, so no GDPR-specific posture (lawful basis, DPA, EU rep) could be verified.
source: numer.aiNot applicable / no public evidence. Numerai's product does not handle health data and no HIPAA mention was found on any vendor page.
source: numer.aiNo public evidence found on vendor domain. NMR staking uses cryptocurrency rather than card payments, so this cert is likely out of scope; not confirmed either way.
source: numer.aiNo public evidence of AI governance certification found on vendor domain.
source: numer.aiNo public evidence found on vendor domain; not applicable to this consumer/community tournament product.
// Privacy & AI training
Trains on customer data
Not stated
Data processing agreement
Not offered
Data region
Not publicly specified; no data-residency or regional-hosting information found on vendor domain.
Numerai is not a generative-AI SaaS tool; it distributes obfuscated, regularized financial features to a global network of data scientists who submit their own predictive models. The homepage states the tournament data is 'Obfuscated, so it can be given out for free,' which limits exposure of raw financial/PII data by design. Numerai in turn aggregates participants' submitted predictions into a 'meta model' used by its hedge fund - this is the core, openly disclosed mechanic of the product, not a hidden LLM-training use of customer content. Whether participant-submitted model code/IP is used beyond scoring could not be confirmed; no explicit opt-out language was located.
// Security controls
API Authentication
Scoped API keys (public_id + secret_key pair) generated per-user under Account -> Custom API Keys; each key carries a configurable set of permission scopes rather than full-account access.
docs.numer.aiData Obfuscation
Tournament training/prediction data is described as 'clean and regularized... Obfuscated, so it can be given out for free,' reducing exposure of raw source financial data to participants.
numer.aiVulnerability Disclosure Program
No SECURITY.md or public responsible-disclosure policy found across the Numerai GitHub organization's public repositories.
github.comEncryption in Transit
Not documented publicly; site and API are served over HTTPS, but no formal encryption-in-transit disclosure (e.g., TLS version, HSTS policy) was located.
numer.ai// Products & data scope
data: Obfuscated, anonymized equity-market features and targets; no participant PII required beyond account/login credentials and API keys.
Free to enter; participants submit model predictions and can stake NMR cryptocurrency on their models to earn or lose based on performance.
data: Participant-sourced external datasets combined with Numerai targets.
Variant tournament for data scientists who bring their own signals/data sources.
data: Obfuscated crypto-market features and targets.
Crypto-asset focused tournament, same staking/reward mechanics.
data: Likely handles investor KYC/financial/PII data as a regulated investment vehicle; not verifiable from public vendor pages captured in this review.
Separate legal entity from the free tournament platform; open only to institutional and qualifying accredited/high-net-worth investors, not retail users. Reported ~$450M AUM with a JPMorgan asset-management commitment (per independent press, not vendor-sourced). Any AIFOXX listing of Numerai should scope its review to the tournament/API product, not this investment entity.
// What to watch
- No trust center, security page, or any SOC 2 / ISO 27001 / HIPAA / GDPR-specific documentation could be found on numer.ai, docs.numer.ai, or the Numerai GitHub org, despite direct search and fetch attempts. Absence of evidence here is due to genuinely thin public disclosure, not a JS-rendering gap for the certification claims themselves.
- DPA, GDPR posture, and data-retention specifics are therefore unconfirmed rather than confirmed-absent - a human reviewer should open numer.ai/terms in a real browser to verify before any privacy claims are published.
- Identity-conflation risk flagged and resolved: general web search for 'Numerai privacy policy' surfaces multiple unrelated similarly-named companies (Numero, NumberAI, Numerion Labs, Numerize AI, Numeric.io, Norm Ai). Identity of numer.ai / Numerai Inc as the crowdsourced hedge fund was cross-confirmed via independent sources (TechCrunch, Bloomberg, Wikipedia, CB Insights) matching the evidence file's homepage content (NMR staking, meta model, Union Square Ventures backing). No facts from the similarly-named companies were used in this assessment.
- Numerai spans two materially different entities: the free, low-PII tournament/API platform (numer.ai) and an affiliated, investor-only hedge fund (Numerai GP LLC / numerai.fund) that likely handles investor KYC/financial PII under separate and unverified data practices. Do not apply one compliance posture to both.
- Vendor is an atypical fit for standard SaaS-style security review: it is fundamentally a hedge fund whose tournament data is intentionally obfuscated/anonymized by design, which reduces PII exposure but also means industry-standard SaaS trust signals (trust portal, DPA page, security whitepaper) are simply absent rather than hidden.
- No evidence of a security incident or breach was found, but absence of negative news is not proof of a security program.
// At a glance
Pricing model
Free to participate in tournaments; earnings/losses paid in NMR cryptocurrency via staking. The affiliated hedge fund is a separate, investor-only financial product with its own (unverified) fee structure.
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Numerai Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-08. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
numer.ai