PARDX CLOUD
A private VM for your account.
Run work in a per-user VM when your own machine is not the right place. Its state is encrypted, it is available from any browser, and it follows the same Approvals as Station.
The machine is yours, not shared.
Every job runs in a fresh, isolated container holding one user’s state and one user’s credentials — yours. Secure for that user alone. When the run ends, the container is destroyed. There is no shared process, no shared home directory, no shared environment.
Available from anywhere, for any project.
Open Pardx from any browser and the VM is ready — for the project you are shipping or the experiment you just started. Nothing to leave running on a laptop. Idle means asleep, not deleted: encrypted state persists and restores in seconds.
The worker can reach nothing.
The container that executes your job carries no cloud identity at all — zero permissions. Decryption and access control happen in the control plane, never inside the machine that runs agent code. Even a compromised run has nothing to steal.
Your credentials are sealed.
Keys you connect are envelope-encrypted: a per-user data key encrypts the blob (AES-256-GCM), and that key is itself wrapped by a managed KMS key. The vault opens only at job launch and is scrubbed before the machine sleeps.
Same rules as your laptop.
Pardx Cloud sits beside your own machines in Connections and answers to the same Approvals, the same stop button, and the same record. Where the work runs changes; who is in control does not.
The full isolation model — what each component can and cannot reach — is written up plainly on the security page.
Run agents without giving up control.
Request early access