Security
Effective 15 September 2026
CostSlice is operated by Media Yard LLC, PO Box 73, Pennsauken, NJ 08110. This is what we actually do. It is not a trust center and not a certification page. The legal hub lists every policy we publish.
TLS
Traffic to costslice.com and api.costslice.com uses TLS.
What is stored
Usage metadata: model, token counts, latency, status, timestamps, request counts, and the opaque tags you send. We store a hash of x-cs-key so we can look up the workspace. Account email and workspace membership so we can send a magic link and run the account.
What is not stored
Prompt bodies are not written to disk. Completion bodies are not written to disk. Your OpenAI API key is forwarded and never stored. We cannot look up what someone typed.
Backups
Backups age out. Plan retention of usage metadata is 7 days on Starter, 90 on Pro, 365 on Scale.
Where it runs
We host in the United States. Vercel runs the site and the proxy. Neon Postgres in us-east-1 holds account records and usage metadata. The named parties are on Subprocessors.
What we do not claim
Media Yard LLC is not SOC 2 certified. CostSlice is not HIPAA certified. We do not sell a questionnaire pack or a pentest PDF.
Abuse
Report abuse to support@costslice.com with the subject line Abuse. Include the workspace email and what you saw. We still cannot look up a prompt.