Security

Last updated: June 22, 2026

Security Overview

PlanetGraph combines graph data management, access controls, encryption, audit logging, and AI-native search features. This page summarizes the technical safeguards currently documented for customer diligence.

Encryption

  • Connections to PlanetGraph are protected with TLS 1.2 or higher; modern clients typically negotiate TLS 1.3.
  • Managed infrastructure uses encryption at rest through Google Cloud services.
  • Customer property values are protected with envelope encryption and account-scoped keys.
  • Search artifacts and embeddings are derived data and are governed by customer-configured searchability controls.

Access Controls

  • API access uses API keys or authenticated user sessions.
  • Properties support access policies that control returnability.
  • Property search rules control searchability separately from whether a value can be returned.
  • Node and edge visibility controls can hide resources from non-owners.
  • Account admin access is restricted to designated accounts and administrative routes.

Auditability

PlanetGraph records audit events for account activity and data changes. Customers can review account-scoped audit logs through the application and API. Audit records may be retained where needed for security, legal, or operational reasons.

AI and Embedding Controls

PlanetGraph can generate embeddings through OpenAI for semantic search. Only properties configured by the customer as searchable are eligible to contribute to embedding source text. If no properties are configured as searchable, customer property content is not sent to OpenAI for embedding generation.

Infrastructure

PlanetGraph's managed production environment runs on Google Cloud. Production API and primary database resources are currently deployed in the United States in us-central1. See Data Residency for details.

Incident Response

Security incidents are investigated and handled according to severity. PlanetGraph will notify affected customers without undue delay and in accordance with applicable legal requirements and any agreed DPA terms.

Contact

Report security questions or concerns to security@planetgraph.ai.