The short version
- Strong tenant isolation — your data is logically separated from other customers by design, with no cross-tenant queries possible.
- All data at rest is encrypted. Enterprise plans add customer-managed KMS keys so your team controls key material independently.
- Every prompt and response passes through a governance pipeline: classification, policy, budget, audit.
- Customer data is not used to train models — yours or anyone else’s.
- All infrastructure is defined as code and changed through reviewed pull requests, not console clicks.
- Need dedicated infrastructure? Single-tenant AWS deployment — exclusive database, cache, and buckets — is available at the Enterprise tier.
Go deeper
Security
Encryption at rest and in transit, network isolation, least-privilege access, and the operational discipline behind them. Customer-managed keys available at Enterprise tier.
Read moreCompliance
An honest status table: which frameworks the platform is designed for, aligned with, and working toward — with no inflated claims.
Read moreData handling
Classification tiers, DLP behaviour, retention, and exactly what happens to a prompt on its way to a model.
Read moreArchitecture & scalability
The 16-step governance pipeline, a serverless-first design that scales with your usage, and enterprise options for dedicated single-tenant deployment.
Read moreSecurity FAQ
The questions security questionnaires actually ask, answered directly.
Read more