RightNow
Parent company of RightNow Inference, formerly RunInfra, which provides hosted open-model inference for AI agents and applications.
Past recognitions
About RightNow
RightNow AI is a research lab for GPU kernel optimization. Our platform RunInfra serves top open-source models optimized for AI agents at a fraction of the cost of closed-source APIs RightNow AI lab: https://rightnowai.co RunInfra platform: https://runinfra.ai.
Products
Hosted open-model inference with OpenAI-compatible and Anthropic-compatible APIs, streaming, and session-aware routing for cached context.
Security and compliance
As reported by RightNow. Ask for audit reports before you buy.
- SOC 2 Type IICompliant
- GDPRCompliant
- CCPA/CPRACompliant
- HIPAACompliant
- TLS 1.2 or higher for website and inference endpoint traffic, with HSTS preload and encrypted internal private networking.
- AES-256 encryption at rest for the primary database and object storage; provider-native encryption for cached model weights.
- Envelope encryption for API keys, OAuth tokens, and other credentials, with environment-bound secret managers.
- Email/password and Google or GitHub OAuth authentication through Supabase Auth; customer-facing SAML or OIDC SSO is not currently offered.
- Workspace-scoped role-based access control and database row-level security for tenant isolation.
- Production engineering access protected by SSO and multi-factor authentication, with least-privilege access, logging, and recurring reviews.
- Customer-data access for incident investigation is logged, scoped to relevant records, and associated with a support ticket.
- DDoS protection, private API networking, authenticated compute-provider APIs, scoped rotatable credentials, rate limiting, and bot checks.
- Mandatory code review, CodeQL scanning, GitHub secret scanning, and Dependabot alerts.
- Centralized logging, separate authentication and customer-data access logs, secret masking in application error monitoring, and continuous API health checks.
- Recurring third-party penetration testing and a continuous vulnerability management program.
- Documented incident response plan and customer breach notification without undue delay and within 72 hours of awareness.
- Hosted Model APIs advertise zero prompt retention by default and no training on prompts or completions; non-streaming responses may be cached for up to 24 hours when an Idempotency-Key is supplied.
Is this your company?
Claim the profile to keep facts current, answer buyers and submit evidence for the next ranking review.
Claim RightNow