Security
Built to never leave your network
No third-party API in the request path, and no prompt or document ever crosses the perimeter. This is the posture we design every deployment against.
Data residency
Documents, embeddings and model weights stay inside the environment you provision — your GPUs, your tenancy, your network boundary.
Air-gapped by default
Deployments are built to run with no outbound path to the public internet. Where a connection genuinely must exist, it's scoped and reviewed with you, not assumed.
No telemetry phone-home
Our systems don't call home for usage analytics or model improvement. What happens on your hardware stays on your hardware.
Model & weights provenance
Every open-weight model we deploy is traceable back to its published source and checksum, reviewed before it's ever loaded onto client hardware.
Audit logging
Query and retrieval activity is logged locally, in a format your own security team can inspect — not a dashboard we host on your behalf.
We haven't published formal compliance certifications (SOC 2, ISO 27001) yet — if a review requires one, tell us and we'll scope it honestly rather than claim it in advance.