How to meet it
OWASP AISVS v1.01
Infrastructure, Configuration & Deployment Security · Edge & Distributed AI Security
Encrypt weights stored on devices
Verify that model weights and sensitive parameters stored locally are encrypted using hardware-backed key stores or secure enclaves.
OWASP AISVS v1.01, requirement 4.3.4
In plain English
Encrypt model weights and sensitive parameters stored on devices, with keys held in hardware.
What good looks like
- Weights are encrypted at rest on the device.
- Keys are held in a hardware key store or secure enclave.
- Keys are not in the app package.
How teams usually do it
- Platform key stores such as Android Keystore or the iOS Secure Enclave.
Evidence an auditor would accept
- Storage and key management design.
Common mistakes
- Encrypting the model with a key stored next to it.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.