RightNow

Parent company of RightNow Inference, formerly RunInfra, which provides hosted open-model inference for AI agents and applications.

Past recognitions

About RightNow

RightNow AI is a research lab for GPU kernel optimization. Our platform RunInfra serves top open-source models optimized for AI agents at a fraction of the cost of closed-source APIs RightNow AI lab: https://rightnowai.co RunInfra platform: https://runinfra.ai.

Products

  • RightNow Inference Model APIs

    Model Hosting & InferenceFrom $5

    View product

    Hosted open-model inference with OpenAI-compatible and Anthropic-compatible APIs, streaming, and session-aware routing for cached context.

Security and compliance

As reported by RightNow. Ask for audit reports before you buy.

  • SOC 2 Type IICompliant
  • GDPRCompliant
  • CCPA/CPRACompliant
  • HIPAACompliant
  • TLS 1.2 or higher for website and inference endpoint traffic, with HSTS preload and encrypted internal private networking.
  • AES-256 encryption at rest for the primary database and object storage; provider-native encryption for cached model weights.
  • Envelope encryption for API keys, OAuth tokens, and other credentials, with environment-bound secret managers.
  • Email/password and Google or GitHub OAuth authentication through Supabase Auth; customer-facing SAML or OIDC SSO is not currently offered.
  • Workspace-scoped role-based access control and database row-level security for tenant isolation.
  • Production engineering access protected by SSO and multi-factor authentication, with least-privilege access, logging, and recurring reviews.
  • Customer-data access for incident investigation is logged, scoped to relevant records, and associated with a support ticket.
  • DDoS protection, private API networking, authenticated compute-provider APIs, scoped rotatable credentials, rate limiting, and bot checks.
  • Mandatory code review, CodeQL scanning, GitHub secret scanning, and Dependabot alerts.
  • Centralized logging, separate authentication and customer-data access logs, secret masking in application error monitoring, and continuous API health checks.
  • Recurring third-party penetration testing and a continuous vulnerability management program.
  • Documented incident response plan and customer breach notification without undue delay and within 72 hours of awareness.
  • Hosted Model APIs advertise zero prompt retention by default and no training on prompts or completions; non-streaming responses may be cached for up to 24 hours when an Idempotency-Key is supplied.

Is this your company?

Claim the profile to keep facts current, answer buyers and submit evidence for the next ranking review.

Claim RightNow