Security
Without a secure corporate AI option, staff put sensitive material into public tools anyway. AI+ Pro removes the trade-off between capability and control.
We are not a model company. We have zero commercial interest in your data. We don't train models; we orchestrate them.
The first question every security review opens with. Pick the row your policy allows — the product is the same in all three.
Deployed into your own AWS, Azure or GCP account.
Runs inside your own perimeter, with an air-gapped option.
A dedicated environment we run, shared with nobody.
Six claims, and what each one rests on. A security review is going to ask for the right-hand column anyway.
Keep documents in storage your organisation owns while AI+ Pro handles routing to models, so the material stays inside infrastructure you control.
Evidence
Storage stays in your account; AI+ Pro holds the routing layer, not the corpus.
End-to-end encryption on every option, with strict access controls throughout.
Evidence
Encrypted on every deployment option, including the managed tenant.
Your work is never used to train a model. Orchestration is the business; your material has no other use here.
Evidence
We are not a model company — there is no training pipeline for your content to enter.
Run against a dedicated environment that is not shared with other organisations, or your own data centre with an air-gapped option.
Evidence
Private cloud, on-premise or isolated tenant — see the three options above.
Technical controls and documentation designed to support GDPR, CCPA, PDPA and industry-specific requirements. Compliance is shared: we provide the controls, you configure them for your regime.
Evidence
Controls and documentation from us; configuration for your regime from you.
Role-based permissions at user, team and department level, model and feature policy, detailed audit logs, and instant revocation.
Evidence
Every query logged; access revocable the hour someone changes role.
The answers your reviewer is going to want in writing, without the call.
| Question | Answer |
|---|---|
| Training on your content | Never. Your material is not used to train or fine-tune any model. |
| Retention | Governed by your own retention policy, not ours. |
| Where documents live | Institution-owned storage, your private cloud, or an isolated managed tenant. |
| What reaches a model | The question and the retrieved snippets — not the full document. |
| Third-party access | None. Files are not shared with other users, organisations or third parties. |
| Audit | Every query and access event logged, exportable for review. |
Compliance is a shared responsibility: we provide the technical controls and documentation, you configure them for your regulatory regime.
Straight answers to the ones that come up in every review.
Where is my data stored?
You choose. AI+ Pro supports institution-owned storage (data stays on infrastructure you control), private cloud options (dedicated environments not shared with other organizations), and standard cloud storage (enterprise-grade encrypted storage managed by us). All options include end-to-end encryption and strict access controls.
How does AI+ Pro ensure data protection?
We implement multiple security layers: data encryption in transit and at rest, role-based permissions determining who sees what, complete tracking of system access and usage, no external training on your data, and infrastructure designed to support GDPR, CCPA, PDPA, and industry-specific requirements.
Can my organization control who has access to what?
Yes. AI+ Pro includes enterprise-grade access management allowing you to set role-based permissions at user, team, and department levels, control which AI models different users can access, restrict certain features based on security policies, monitor usage through detailed audit logs, and revoke access instantly when team members change roles.
Is AI+ Pro compliant with data protection regulations?
Our infrastructure is designed to support compliance with GDPR (Europe), CCPA (California), PDPA (Southeast Asia), and other regional data protection frameworks. However, compliance is a shared responsibility—we provide the technical controls and documentation, and you configure the platform according to your specific regulatory requirements.
What happens to my files after I upload them?
Files are processed within your approved infrastructure and remain under your control. They're used only to answer your specific queries through RAG and are not shared with other users or organizations, used to train AI models, accessible to third parties, or retained longer than your data retention policy specifies.
We would rather answer the hard questions early. Send your review requirements and we will work through them with you.
