Entity, age, funding, status page, SLA, compliance and the terms that decide whether you can leave. This is the part of a sandbox that documentation testing cannot tell you.
16 providersPrices checked 29 October 2026Sources linked
The idea
A sandbox is a dependency. Your agent's files, its logins and sometimes its only working environment live on someone else's machine. The company decides how long that machine is likely to exist, who owns it after an acquisition, and whether anyone answers when it fails.
Four facts are worth establishing before you build. Who is the contracting entity, and in which jurisdiction? How old is the product, and has it changed hands? What does the status page actually measure? And what do the terms say about price changes and deleting your data after you cancel?
An SLA is a promise with a remedy, not a status page. Several providers publish none, and several publish a number that covers a platform rather than the sandbox product. Compliance works the same way: a SOC 2 report has an entity and a scope, and neither is implied by a badge.
Where providers split
The claim on the left, the provider's own words on the right
Independent, acquired, or one product of a studio
Blaxel is the only acquisition here: Baseten acquired it on 10 September 2026, and the linked standard terms still name Blaxel, Inc. and predate the deal. InstaBox is a second product line of InsForge AI, launched in October 2026, not a separate company. Sandboxer is one product of North Bay Ventures, Jon Oringer's studio, and its contracting entity was incorporated in 2022, four years before the product launched.
The practical question is not who owns the brand but who signs the contract and what happens to your data if the product is folded into another platform.
Boat's FAQ claims 99.95% measured over the history of all sandboxes. Its status page, read over 90 days, gives a different picture: seven customer-facing components range from 98.83% (Sandbox Fork) to 100%, and pooled across the seven the figure is 99.74%. One further component is an internal edge-case test suite, not customer uptime, and Stop + Resume covers only about a third of the window.
Runtime checks the API every two minutes and starts a real sandbox every ten; its API passed 96.37% of checks over seven days and 98.87% over 30. Lizard's status page reports a platform figure but has no sandbox component. Vercel lists Sandbox as operational without a Sandbox-specific percentage, and Sprites has a component on Fly's page but no numeric figure.
“Sandboxes have an uptime of 99.95%. boat measures this over the history of all sandboxes.”
Runtime's 99% API promise is credit-based and tied to having paid, not to a plan: every paid account gets service credit equal to 10% of that month's charges if the API misses the target. Vercel's 99.99% Enterprise SLA covers the platform and does not name Sandbox. Fly's 99.9% SLA is Enterprise-only and credits must be claimed, and Sprites coverage under it is not confirmed.
Several providers publish no SLA at all: Boat disclaims uptime, Agent 37 promises none unless agreed in writing, and Sandboxer says there is no SLA during early access.
“It covers every account that has bought credit and has not had all of it refunded or charged back”
Runtime's certification table attaches each certificate to a supplier, not to Runtime: the SOC 1, SOC 2, SOC 3 and ISO 27001 entry is for its data centre in Virginia. E2B reports a SOC 2 Type II report for FoundryLabs, Inc. and a HIPAA BAA path. Vercel holds SOC 2 Type 2 and ISO 27001 at platform level, without establishing that Sandbox is in scope.
Morph has no verified SOC 2 for Morph Labs, Inc. A Delve trust portal sometimes cited for it belongs to AutoInfra, a different company. InstaBox's Trust Center shows a HIPAA badge only, and its YC badge is on insforge.dev, not instabox.sh.
“Sandboxes, their disks and memory — Data center, Virginia — SOC 1, SOC 2 and SOC 3 Type 2; ISO 27001”
boxd may adjust published rates at any time for usage from the date of the change, with no notice period, and may delete customer content after a 30-day retention period. Boat's terms cancel immediately when you close the account and forfeit prepaid value. Blaxel may delete customer data at its discretion, with a 90-day maximum retention.
Others are more specific: Lizard deletes within a commercially reasonable timeframe, and immediately on request including backups. Fly deletes customer data within 30 days, with residual encrypted backups up to 90. Agent 37 keeps a deleted Cloud instance's recovery copy for seven days, but dashboard hosting is kept until you ask.
“Boxd may adjust its published rates at any time, effective for usage from the date of the change onward”
The same job at every provider, from the documented defaults
Procurement asks for the entity, the SLA and the SOC 2
A bank's vendor review asks four questions: who signs the contract, what uptime is promised, which entity the SOC 2 covers, and what happens to your data after cancellation.
Entity
The name on the terms, the name on the invoice and the name in the registry have to match. Two providers have a second entity or an acquisition in between.
Promise
A status page is not an SLA. The SLA names a plan, a measurement and a remedy, or it does not exist.
Scope
A SOC 2 report names an entity and a system. A badge on a marketing page names neither.
Most of the sixteen publish no SLA at all, and the numbers that do exist cover a platform, an API or an enterprise tier rather than the sandbox product. The compliance answer is narrower than the badge: one report belongs to a different company, one covers a data centre, and one Trust Center shows HIPAA only.
SOC 2 Type 2 on every tier, HIPAA with a BAA from Pro up, a 99.9% control-plane SLA with credits, and a public status page.
What to watch for
The details that decide the answer in practice
01
The contracting entity and its jurisdiction, not the brand on the homepage.
02
What the uptime percentage covers: a component, an API, a platform, or a real sandbox.
03
Whether an SLA exists at all, which plans it covers, and whether the remedy is credit or cash.
04
Whether a compliance report names the entity and the product you are buying.
05
The notice period before a price change, and what happens to prepaid value on cancellation.
06
The deletion window after termination, including backups, and whether you get an export.
Compare all 16
Docs read 28 October 2026
Entity, age, funding, status page, SLA, compliance and the terms that decide whether you can leave. This is the part of a sandbox that documentation testing cannot tell you.
Agent 37 Inc., New York law; state of incorporation not published. Founded 2026 by Vishnu Krishnaprasad, YC Fall 2026; funding amount not published. Status components report 100% over 30/60/90 days, provider-reported. No SLA unless agreed in writing. SOC 2 Type I on request, Type II in progress; ISO and HIPAA not published. Deleted Cloud instances keep a recovery copy 7 days; dashboard hosting is kept until you ask; account data goes within 30 days.Agent 37's own wordsdocs-confirmed
“we do not promise a specific uptime level unless we have agreed to one with you in writing.”
Blaxel, Inc. (formerly Beamlit), Delaware, acquired by Baseten on 10 September 2026; the linked terms still name Blaxel and predate the deal. Six founders including CEO Paul Sinaï and CTO Christophe Ploujoux; founded 2024; $7.3M seed. Status reports Sandboxes 99.33% and Platform 99.30% for Jul–Oct 2026, provider-reported. No standard numeric SLA; Custom lists custom SLAs. Claims SOC 2, HIPAA and ISO 27001; HIPAA add-on $250/month. On termination it may delete data at its discretion, with a 90-day maximum retention.Blaxel's own wordsdocs-confirmed
Dedale AI, Corp., Delaware, Dover address. Founded 2026 by Anicet Nougaret (CEO) and Kirill Makarov (CTO), YC Fall 2026; no priced round published. Seven customer-facing status components range 98.83%–100% over 90 days, pooled 99.74%; Sandbox Fork is lowest and Stop + Resume covers about a third of the window. No SLA; the terms disclaim uptime. SOC 2 in progress; no ISO, HIPAA or SSO. No price-change notice; closing the account cancels immediately and forfeits prepaid value.Boat's own wordsdocs-confirmed
“We do not guarantee that sandbox will be uninterrupted”
Azin Tech Operating Company B.V., KvK 99718340, Amsterdam; a near-identically named holding company sits above it, which is inferred rather than stated. Founders and headcount not published; €2M pre-seed September 2026. No status page and no uptime figure. No SLA. No SOC 2, ISO 27001, HIPAA or trust centre claimed. Residency contradicts itself: the FAQ says no US cloud dependency, while the privacy notice names US clusters and Latitude.sh LLC as infrastructure. Price changes apply immediately for new usage; data may be deleted after 30 days.boxd's own wordsdocs-confirmed
““Boxd”, “we”, “us” or “our” means Azin Tech Operating Company B.V. (KvK 99718340, RSIN 869104743, VAT NL869104743B01), with its corporate seat in Amsterdam”
Cloudflare, Inc., Delaware, incorporated July 2009, NYSE: NET, 5,156 staff. The Workers SLA covers Workers only; no sandbox SLA. SOC 2 Type II and ISO 27001 are company-wide, with no published scope for Containers or Sandboxes.Cloudflare Sandbox's own wordsdocs-confirmed
“This Workers Service Level Agreement (“Workers SLA”) applies to use of Workers only.”
Daytona Platforms Inc., New York address, Delaware law; Delaware incorporation unconfirmed. Founded 2023; $91M raised after a $60M Series B at a $1B valuation. SLA 99.95% with credits for Tier 4+; A SOC 2 Type II report covering December 2025 to March 2026 is available from the trust centre; ISO 27001 is in progress.Daytona's own wordsdocs-confirmed
“Daytona will use commercially reasonable efforts to make the Services available 99.95% of the time in any given calendar month”
FoundryLabs, Inc., Delaware. Founded 2023 by Vasek Mlejnsky (CEO) and Tomas Valenta (CTO); $21M Series A in July 2025, $32M total. Status page shows 99.78% for US-West-1 over Jul–Oct 2026, a regional aggregate rather than an SLA. Enterprise terms set uptime and support in the agreement; no public numeric SLA for Hobby or Pro. SOC 2 Type II report on request and a HIPAA BAA path. Fees can change with 30 days' notice, but general terms changes take effect immediately; deletion after cancellation has no published deadline.E2B's own wordsdocs-confirmed
InsForge AI, Inc., Delaware; InstaBox is its second product, launched 14 October 2026 and priced 19 October. Founded 2025 by Hang Huang (CEO) and Tony Chang (CTO), YC Spring 2026, six people, $8M seed in September 2026. The YC badge is on insforge.dev, not instabox.sh. No public status page; per-machine metrics only. 99.9% SLA on Enterprise only, with no credits or measurement published. HIPAA badge only; no SOC 2 report, ISO or public DPA. Fees non-refundable; terminate through support.InstaBox's own wordspricing-page
Dragon Labs LLC, Portland address, Delaware law. Founded 2026 by Yura Dubinin (co-founder and president) and Mikhail Erin; no funding announced. Infrastructure on OVHcloud in Germany and the US. Status page reports Platform 99.95% and both regions 99.85%, but has no sandbox component and covers only widespread incidents. No published SLA; Enterprise lists SLAs. SOC 2 coming soon, no BAA. Price rises get dashboard or email notice and apply from the next calendar month; deletion after termination is within a commercially reasonable timeframe, immediate on request including backups.Lizard's own wordsdocs-confirmed
“We are Dragon Labs LLC, doing business as Lizard”
Modal Labs, Inc., Delaware, founded 2021; $750M Series D at $15.75B, over $1.2B raised, 200+ staff. No public SLA; SOC 2 Type II with a 2025 report period; HIPAA Enterprise only.Modal's own wordsdocs-confirmed
“If Customer has purchased a subscription plan that includes Modal's uptime and support SLAs, Modal's Service Level Agreement will be attached to the Service Order.”
Morph Labs, Inc., San Francisco; founded 2023 by Jesse Han. Funding is contradictory: one third-party source reports a $5.75M Khosla-led seed, another says no funding was raised. Status page reports 100% for Morph Cloud API over 90 days, provider-reported. No numeric SLA; a separate order SLA would control. No verified SOC 2 for Morph Labs; the Delve portal belongs to AutoInfra, a different company. Prices change with 30 days' notice, or 60 days if cumulative increases exceed 15% in 12 months; month-to-month termination is effective next billing cycle; deletion after cancellation not published.Morph's own wordsthird-party
Runtime LLC, Denver; state of formation not published. No founder or executive named; launched September 2026; funding not published. Status checks the API every 2 minutes and a real sandbox every 10; the API passed 96.37% over 7 days and 98.87% over 30. The 99% promise is credit-based: 10% of the month's charges for any account that has bought credit, not tied to a plan. SOC 2 and ISO certificates belong to its data centre in Virginia, not Runtime. New usage can be repriced as soon as posted; cancellation deletes content without a notice promise.Runtime's own wordspricing-page
“Paid accounts are promised 99% API uptime every calendar month.”
North Bay Opco I, Inc., Delaware, Miami mailbox; part of North Bay Ventures, Jon Oringer's studio. Entity incorporated November 2022; product launched 18 October 2026; funding not published. Status reports API 100%, sandboxes 99.45% and website 99.79% over 30 days, but the product is ten days old, so the 90-day columns cannot all be production traffic. No SLA during early access. No SOC 2, ISO or HIPAA. Price changes need 30 days' notice; cancellation runs to month end; closing forfeits remaining credit; data is deleted after termination with no export window.Sandboxer's own wordsdocs-confirmed
Fly.io, Inc., Delaware; CEO Scott Johnston, founder Kurt Mackey advisory; platform since 2017, Sprites launched January 2026; $25M Series D in July 2026. Status page lists Sprites as a component but shows no numeric uptime; it covers global incidents only and recorded a certificate outage on 11–12 October. The 99.9% SLA is Enterprise-only and credits must be claimed; Sprites coverage is not confirmed. SOC 2 is platform-level and does not name Sprites; the BAA is a $99/month add-on. The customer is responsible for backups; data deleted within 30 days, backups within 90.Sprites's own wordsdocs-confirmed
“at least ninety-nine and nine tenths percent (99.9%) of the total time in each calendar month”
Vercel Inc., Delaware; founded 2015 by Guillermo Rauch. Sandbox announced June 2025, generally available January 2026; $300M Series F at a $9.3B valuation in September 2025. Status page shows Sandbox Operational but no Sandbox-specific uptime figure. The 99.99% Enterprise SLA covers the platform and does not name Sandbox; Pro and Hobby have no SLA. SOC 2 Type 2 and ISO 27001 are platform-level; Sandbox scope is not established. Fee changes need written notice and apply from the next payment period; content may be deleted on termination.Vercel Sandbox's own wordsdocs-confirmed
“available 99.99% of the time, excluding any Excused Downtime events”
Tensorlake, Inc., San Francisco, founded 2023, 11–50 people, $8M seed from Artisanal Ventures, Plug and Play and Hawk Hill per third-party records with conflicting dates. SOC 2 Type 2 everywhere; HIPAA with a BAA on Pro and above but no HIPAA badge in the Trust Center. 99.9% control-plane availability, service credits capped at 50% of the month's fees and no cash refund, paid plans only. Public Datadog status page. California law, San Francisco courts.Tensorlake docs: Security Policies — certification, data storage, encryption, subprocessors ↗Tensorlake's own wordsdocs-confirmed
“TensorLake will use commercially reasonable efforts to make the Control Plane available 99.9% of the time in each calendar month”
YesWith a catchNoNot publishedHover or select a mark to see the catch.
Questions to ask before you sign
Each one targets something the documentation does not answer
Which legal entity signs, in which jurisdiction, and does the name on the terms match the name on the invoice?
What exactly does the uptime number measure — a component, an API, a platform, or a real sandbox?
Is there an SLA, which plans does it cover, and is the remedy service credit or cash?
Does the SOC 2 report name the entity and the product I am buying, and what period does it cover?
What is the notice period before a price change, and what happens to prepaid value if I cancel?
Common questions
Answered from the capability checks; each links to the provider-by-provider detail and its sources
Which sandbox providers offer “public status page”?
A page showing outages and incidents. Fully: Agent 37, Blaxel, Boat, Cloudflare Sandbox, Daytona, E2B, Lizard, Modal, Morph, Runtime, Sandboxer, Sprites, Tensorlake and Vercel Sandbox. See each provider's catch
Which sandbox providers offer “uptime promise (SLA)”?
A written promise about availability, usually with credits if broken. Fully: Runtime. With a catch: Blaxel, Daytona, E2B, InstaBox, Lizard, Sprites and Vercel Sandbox. Not at all: Agent 37, Boat, Cloudflare Sandbox, Modal, Morph, Sandboxer and Tensorlake. See each provider's catch
Which sandbox providers offer “sOC 2 report”?
An independent security audit report you can request. Fully: Blaxel, Cloudflare Sandbox, Daytona, E2B, Modal and Tensorlake. With a catch: Agent 37, Runtime, Sprites and Vercel Sandbox. Not at all: Boat, Lizard and boxd. See each provider's catch
Which sandbox providers offer “data processing agreement”?
A GDPR data processing agreement is offered. Fully: Cloudflare Sandbox, Daytona, E2B, Lizard, Modal, Runtime, Sprites, Tensorlake, Vercel Sandbox and boxd. With a catch: Boat and Sandboxer. See each provider's catch
Which sandbox providers offer “open source or self-hostable”?
The sandbox software can be run on your own servers. Fully: E2B and boxd. With a catch: Cloudflare Sandbox, Daytona and Tensorlake. Not at all: Agent 37, Blaxel, Boat, InstaBox, Lizard, Modal, Morph, Runtime, Sandboxer, Sprites and Vercel Sandbox. See each provider's catch