Security & Trust

Lutflow is built with enterprise security in mind. Our SDK and Sentinel agent operate under strict guarantees to ensure your infrastructure and data remain secure.

Supply-Chain Verification

The Lutflow SDK utilizes Trusted Publishing on PyPI to generate cryptographically signed attestations. When downloading Lutflow, you can verify these signatures and hashes to guarantee that the package you run is exactly what was built by our CI/CD pipeline, protecting against supply-chain attacks.

Data Privacy (No Capture Guarantees)

Lutflow NEVER captures the content of your LLM prompts or responses.

Our tooling strictly inspects token lengths and system metadata (like concurrent request volume) for the sole purpose of tracking and attributing costs and energy metrics. The actual content of the payloads passing through your models remains entirely opaque to Lutflow.

Licensing

The Lutflow SDK is distributed under the Business Source License 1.1 (BSL 1.1). Lutflow is explicitly source-available, not OSS. This ensures transparency and allows you to inspect and modify the code for internal usage while respecting the commercial bounds of the license.