Hugging Face
Hugging Face · Model hub & inference platform
Ayliea's assessment: Medium RiskAyliea recommends: MonitorIn Ayliea's curated list
Verified . Risk classification and recommended policy are Ayliea's subjective assessments — not vendor certifications.
- Data residency
- United States; EU on Enterprise Hub
- Zero retention available
- Yes (commercial / Enterprise tier)
- Certifications
- SOC 2 Type II
Why this rating
Inference Endpoints offer dedicated, no-shared-tenancy hosting with SOC 2 attestation. The public Spaces / Hub is research-grade and not appropriate for sensitive workloads.
Considerations before deploying
- Use Inference Endpoints (paid) for any production workload, not the free Inference API
- Enterprise Hub adds SSO, audit logs, and EU residency
- Per-model risk applies — open-weight models may have unknown training data
Sources
- Hugging Face Security (huggingface.co)
- HF Inference Endpoints (huggingface.co)
Want this for every tool on your network?
A scoping call starts an expert assessment that maps your full AI surface — sanctioned and shadow — from the log metadata you share.