One request.
One isolate.
Zero shared state.
Every prompt that passes through Privedge runs inside a dedicated V8 isolate — the same sandboxing model that separates Chrome tabs. There is no shared heap, no global variables, no possibility of one tenant's data leaking into another's request.
The isolate is created at request time and destroyed immediately after. Nothing persists in memory between invocations. The token map lives only in the isolate's V8 heap for the duration of the single request lifecycle.
This is the architecture guarantee: even if an attacker compromises one isolate, they access data from exactly one request. There is no lateral movement possible.
Data processed where your
users already are.
Cloudflare's anycast network routes every request to the nearest point of presence automatically. A user in Madrid hits the Madrid PoP. A user in Singapore hits Singapore. The PII never travels further than it needs to.
310+ cities total · full list at cloudflare.com/network
Workers AI runs on the
same node as your request.
When PII is detected and edge inference is enabled, Privedge invokes Cloudflare Workers AI on the same edge node that received your request. There is no round-trip to any external service — the model and the data share the same physical machine.
Architectural guarantee: PII never leaves the Cloudflare edge node. No cloud API call, no third-party model access, no network transmission of sensitive data.
Low-latency, high-volume tasks — ~$0.00013/req
General-purpose Q&A and summarization — ~$0.00039/req
Complex reasoning, equivalent to GPT-3.5 — ~$0.00082/req
Your data stays
in your jurisdiction.
Cloudflare Regional Services lets Enterprise customers pin processing to specific geographic regions. EU customers can guarantee that PII never leaves the European Economic Area — a hard requirement for GDPR Chapter V compliance.
Isolate heap only. Nothing written anywhere. Token map exists for request duration only.
Timestamps, pii_types[], latency_ms, status_code. Prompt content never stored.
Token maps in Workers KV (AES-256, per-customer key). Full audit trail in R2 with custom retention.