Services in scope
This page exists so an agency can determine what is inside and outside the assessment boundary without requesting access (CDS-CSO-SVC).
The federal offering comprises the full Pinecone platform — Database, Inference, and Assistant. No Pinecone service is excluded from the assessment scope.
In scope
Pinecone Database
Managed vector database. Index creation and management, vector upsert and deletion, similarity search and metadata filtering, namespace isolation, and role-based access control via the Pinecone console and API.
| Confidentiality | Low |
|---|---|
| Integrity | Low |
| Availability | Low |
| Overall | Low |
| Information types | Customer-supplied vector embeddings, associated metadata. Pinecone does not select or control the information types customers place in the service; this categorisation reflects the maximum sensitivity the offering is certified to handle. |
| Available since | 2021-10-01 |
Pinecone Inference
Managed embedding and reranking models, accessible through the Pinecone API, used to turn customer content into vector representations and to reorder search results by relevance.
| Confidentiality | Low |
|---|---|
| Integrity | Low |
| Availability | Low |
| Overall | Low |
| Information types | Customer-supplied vector embeddings, associated metadata submitted for embedding or reranking. Pinecone does not select or control the information types customers place in the service; this categorisation reflects the maximum sensitivity the offering is certified to handle. |
| Available since | 2026-03-18 |
Pinecone Assistant
A managed service that answers questions over a customer's own uploaded documents, combining retrieval over their data with a large language model to produce grounded responses.
| Confidentiality | Low |
|---|---|
| Integrity | Low |
| Availability | Low |
| Overall | Low |
| Information types | Customer-supplied vector embeddings, associated metadata, and customer documents uploaded to Assistant. Pinecone does not select or control the information types customers place in the service; this categorisation reflects the maximum sensitivity the offering is certified to handle. |
| Available since | 2025-01-22 |
Out of scope
No Pinecone services are excluded from the assessment scope.
Deployment constraints
None. There are no region or deployment restrictions an agency must observe to remain in scope.