Cyberdesk's security page, updated March 30, 2026, describes encryption in transit and at rest, service-level authorization, environment separation and least-privilege access.3 Highly sensitive values such as passwords and API keys are handled through Basis Theory-backed vaulting; the page says those values are not logged as normal workflow data and are kept out of ordinary model traffic, with aliases persisted where appropriate.3
For model interactions, Cyberdesk says it prefers zero-data-retention configurations where a provider and workload support them and minimizes model inputs to what a task needs.3 The current Privacy Policy, updated May 1, 2026, covers personal, usage and device data as well as virtual-desktop content, and describes retention according to service need, risk and legal requirements.4
The readable public security page links to a Trust Center but does not itself establish a completed third-party compliance certification, so this review does not infer one.3 Independent product evidence is also sparse: the fixed current source audit did not surface an exact-product professional benchmark, review corpus or eligible numeric user-rating dataset. Missing evidence is neutral, but it limits confidence in vendor reliability and performance claims.