Pre-Install · Security Attestation

Deployment prerequisites & security attestation.

BDS runs on-premise and relies on your organization to secure the environment it's installed in. Before an install is scheduled, you confirm the baseline below — the "you provide & operate" side of the shared-responsibility model in the Deployment & Security overview.

How to complete thisUse your browser's Print (Ctrl/Cmd+P) → Save as PDF, fill in and sign the attestation at the bottom, and return it to admin@veniceinference.com. A signed attestation is required before an install is scheduled.
Environment Baseline

What your environment provides.

Confirm each item for the machine BDS will be installed on.

Network

  • The BDS host sits on a segmented / firewalled network.Not on an open, flat, or guest network.
  • No inbound access to the BDS host from untrusted networks.The internet cannot reach the host's BDS ports.
  • Any access beyond localhost is firewall-restricted to named hosts.If BDS stays single-box, it remains loopback-only and no rule is needed.

Host & operating system

  • The host OS is patched to a currently-supported level.
  • Endpoint protection is present and running.A specific engine-directory exclusion is applied at install; we provide the details.
  • Administrator / login access is limited to named individuals.
  • Physical access to the host is controlled.

Data protection

  • A backup & recovery process covers the data directory.
  • Full-disk / volume encryption on the data drive. Recommendede.g. BitLocker on the drive holding the corpus — strongly recommended, but not required to schedule.

Operations

  • A named person is responsible for the host's security.
  • An incident-response process exists for the environment.
This is a self-attestation.Venice Inference does not assess, test, or access your environment. Securing the network, host, and data at rest is the responsibility of your organization at the installation location. The hardening guide defines what each item above means in practice.
Attestation

Sign and return before scheduling.

I confirm that the environment where BDS will be installed meets the baseline above, and that responsibility for the security of that environment rests with the organization named below. Disk encryption on the data drive is strongly recommended but not required to schedule.

Name
Title
Organization
Signature
Date