# Security · Enterprise AI That Stays Behind Your Firewall > Enterprise AI behind your firewall. Private cloud, on-premise or isolated tenant, with no training on your data. We orchestrate models; we don't train them. Canonical: https://aiplus.pro/security Security ## Your data. Your control. Your rules. Without a secure corporate AI option, staff put sensitive material into public tools anyway. AI+ Pro removes the trade-off between capability and control. [Contact sales](mailto:contact@aiplus.pro?subject=AI%2B%20Pro%3A%20enterprise%20enquiry&body=We%20would%20like%20to%20talk%20about%20an%20enterprise%20licence.) > We are not a model company. We have zero commercial interest in your data. We don't train models; we orchestrate them. ## Three ways to run it The first question every security review opens with. Pick the row your policy allows — the product is the same in all three. Private cloud ### Your infrastructure Deployed into your own AWS, Azure or GCP account. - Data never leaves your cloud account - Your keys, your network policy, your region - Full data control Full data control On-premise ### Your data centre Runs inside your own perimeter, with an air-gapped option. - Zero external access when air-gapped - Suits regulated and classified environments - Nothing egresses without your say-so Zero external access Isolated tenant ### Fully managed A dedicated environment we run, shared with nobody. - Not co-tenanted with other organisations - Managed upgrades and monitoring - Fastest route to a pilot Always monitoring ## Security & Enterprise Features Six claims, and what each one rests on. A security review is going to ask for the right-hand column anyway. ### Institution-owned databases Keep documents in storage your organisation owns while AI+ Pro handles routing to models, so the material stays inside infrastructure you control. Evidence Storage stays in your account; AI+ Pro holds the routing layer, not the corpus. ### Encryption in transit and at rest End-to-end encryption on every option, with strict access controls throughout. Evidence Encrypted on every deployment option, including the managed tenant. ### No data retention or training on user content Your work is never used to train a model. Orchestration is the business; your material has no other use here. Evidence We are not a model company — there is no training pipeline for your content to enter. ### Integrate with institution storage or private cloud Run against a dedicated environment that is not shared with other organisations, or your own data centre with an air-gapped option. Evidence Private cloud, on-premise or isolated tenant — see the three options above. ### Compliance alignment with institutional policies Technical controls and documentation designed to support GDPR, CCPA, PDPA and industry-specific requirements. Compliance is shared: we provide the controls, you configure them for your regime. Evidence Controls and documentation from us; configuration for your regime from you. ### Admin controls Role-based permissions at user, team and department level, model and feature policy, detailed audit logs, and instant revocation. Evidence Every query logged; access revocable the hour someone changes role. ## Data handling, in one table The answers your reviewer is going to want in writing, without the call. Question Answer Training on your content Never. Your material is not used to train or fine-tune any model. Retention Governed by your own retention policy, not ours. Where documents live Institution-owned storage, your private cloud, or an isolated managed tenant. What reaches a model The question and the retrieved snippets — not the full document. Third-party access None. Files are not shared with other users, organisations or third parties. Audit Every query and access event logged, exportable for review. ### Enterprise compliance stack - GDPR aligned - Singapore PDPA aligned - Never trained on your data - SSO/SAML - Data residency - Complete audit trail Compliance is a shared responsibility: we provide the technical controls and documentation, you configure them for your regulatory regime. ## Security questions Straight answers to the ones that come up in every review. Where is my data stored? You choose. AI+ Pro supports institution-owned storage (data stays on infrastructure you control), private cloud options (dedicated environments not shared with other organizations), and standard cloud storage (enterprise-grade encrypted storage managed by us). All options include end-to-end encryption and strict access controls. How does AI+ Pro ensure data protection? We implement multiple security layers: data encryption in transit and at rest, role-based permissions determining who sees what, complete tracking of system access and usage, no external training on your data, and infrastructure designed to support GDPR, CCPA, PDPA, and industry-specific requirements. Can my organization control who has access to what? Yes. AI+ Pro includes enterprise-grade access management allowing you to set role-based permissions at user, team, and department levels, control which AI models different users can access, restrict certain features based on security policies, monitor usage through detailed audit logs, and revoke access instantly when team members change roles. Is AI+ Pro compliant with data protection regulations? Our infrastructure is designed to support compliance with GDPR (Europe), CCPA (California), PDPA (Southeast Asia), and other regional data protection frameworks. However, compliance is a shared responsibility—we provide the technical controls and documentation, and you configure the platform according to your specific regulatory requirements. What happens to my files after I upload them? Files are processed within your approved infrastructure and remain under your control. They're used only to answer your specific queries through RAG and are not shared with other users or organizations, used to train AI models, accessible to third parties, or retained longer than your data retention policy specifies. [See all questions](https://aiplus.pro/faq) Bring your security team. We would rather answer the hard questions early. Send your review requirements and we will work through them with you. [Contact sales](mailto:contact@aiplus.pro?subject=AI%2B%20Pro%3A%20enterprise%20enquiry&body=We%20would%20like%20to%20talk%20about%20an%20enterprise%20licence.)