MAIA runs on Cloudflare's global serverless platform. There are no dedicated servers to protect because there are no dedicated servers.
Serverless Architecture
Every request to MAIA is processed by Cloudflare Workers — lightweight compute instances that run at the edge location nearest to you. There are no virtual machines, no persistent operating systems, no SSH access points. When a request finishes, the compute instance is gone. There is no server sitting idle with your data on it waiting to be breached.
Encryption
- In transit: All traffic between your browser and MAIA is encrypted via TLS (the same encryption your bank uses). Cloudflare manages the certificates.
- At rest: Account data stored in Cloudflare's KV and R2 systems is encrypted at rest by Cloudflare's infrastructure-level encryption.
- Secrets: API keys and signing keys are stored as encrypted Worker Secrets — they are not visible even in the Cloudflare dashboard.
Global Scale
MAIA's infrastructure spans 300+ data centers worldwide. Your requests are processed at the nearest edge location, which means lower latency and no single point of failure. Cloudflare's network provides built-in DDoS protection at the network layer.
What This Means for You
There are no servers to hack. No operating systems to patch. No SSH keys to rotate. No database dumps to exfiltrate. The attack surface of a serverless architecture is fundamentally smaller than a traditional server deployment. Combined with MAIA's Zero Data Retention policy, even a hypothetical breach would find no stored rehearsal data to access.