How Hangar keeps one customer's job apart from the next, where every kind of data lives, and the timings Hangar keeps when an advisory lands.
Residency
Hangar runs in AWS Sydney. Data and storage stay in Australia, and TALOS Defence holds the signing keys in Australia.
| Topic | Fact |
|---|---|
| Hosted capacity | NVIDIA H100 and CPU pools in AWS Sydney, ap-southeast-2. |
| Limits | TALOS Warrant, the part of Hangar that enforces limits, applies the limits you set before the job and enforces them while the job is going. |
| Data and storage | Stay in Australia. Your outputs come back to you. |
| Signing keys | Held by TALOS Defence in Australia, outside the cloud provider. |
| Monitoring | Reads account and instance metadata only. |
| Certificate | TALOS Defence signs a certificate for every job. Anyone can verify the certificate offline. |
| Operator | TALOS Defence, 100 per cent Australian-owned and controlled. |
Hangar runs in AWS Sydney, New South Wales, today. Hangar does not offer a Melbourne region yet. Some organisations must keep data within Victoria under Victorian law. Examples are health information under Health Privacy Principle 9 of the Health Records Act 2001 (Vic), and data held by Victorian Government bodies with a Victoria-only hosting requirement. Do not place that data in Hangar until Hangar offers a Melbourne region.
The certificate
A certificate states facts about a job: what ran, on what, when, and every move of its data. Your assessor draws the conclusion.
Every job ends in a certificate. TALOS Defence signs the certificate with ML-DSA-87 and P-256. Anyone can verify it offline with the published verifier and keys.
Job certificate · issued by TALOS Defence Pty Ltd
HG-7K3M2Q
The switchover between customers is the security boundary. Hangar publishes it step by step.
This reset defends against data left in GPU memory or on disk from the previous customer. It also defends against a poisoned driver or operating system, a process surviving from one booking to the next, and a route between customers.
Subprocessors
One rule for every category of job data: stored and processed in AWS Sydney (ap-southeast-2), under keys held in Australia. Every move that matters is recorded on a certificate.
| Where | Subprocessor |
|---|---|
| In the data path | Amazon Web Services, Asia Pacific (Sydney) region: compute, storage, the registry and secrets. |
| Outside the data path |
|
TALOS Defence Pty Ltd is 100% Australian-owned and controlled.
Hangar's operators are Australian citizens and sign in with hardware security keys.
TALOS Defence's Essential Eight posture is self-assessed at Maturity Level Two.
Hangar is supported until 5 November 2031. Until that date TALOS Defence provides security updates and support for the service and its software. The date only ever moves later.
Every job certificate stays verifiable for at least seven years from issue. TALOS Defence keeps the published keys, the tree heads and the verifier available from its own domain for that whole period.
Write to security@gethangar.au. Our security.txt gives the details.