Backfrom Morph’s own policies · verified 2026-09-02 · some facts not published
Morph: data residency & retention
Headquarters
🇺🇸 United States (US)
Where inference runs
Not disclosed
No public disclosure of cloud API inference locations (OpenRouter dc:US hint unverified). Morph documents a self-hosted deployment option where inference runs entirely inside the customer's own environment.
Region pinning
Enterprise plans only
No region-pinning on the cloud API; enterprise self-hosted deployment ('code never leaves your environment') is the residency mechanism offered.
Prompt retention
Not retained
Privacy policy (per indexed copy; page itself is behind a Vercel security checkpoint that blocked direct fetch) states code data is processed exclusively in volatile memory and never persisted to storage, logs, caches, or backups.
Trains on API data
No
Policy states code/content submitted via the API is never used to train models (customer-support submissions excepted). Legal entity per ToS: AutoInfra, Inc. dba Morph, San Francisco, CA; California governing law.
Zero data retention
Available
Zero data retention described as the default posture for code data; enterprise tier adds contractual ZDR guarantees (contact sales@morphllm.com).
Compiled from Morph’s published privacy policy, terms, and documentation on 2026-09-02. “Not disclosed” means Morph publishes nothing on the point. Policies change without notice, so verify against the sources above before relying on this for compliance decisions.