About
Security and data handling
Our software runs in private environments you control. Every build keeps a record of what it did, and a person at your firm signs off on anything that matters.
Where your data goes
Inside your environment
ContractsClient filesReportsThe AI modelThe record
Outside
Public AI servicesResellers
Your data does not go to public AI services.
Five layers of control
Who can get inSingle sign-on and role design
Where it runsA private environment you control
What it may doA defined list, checked before it confirms
Who signs offA person at your firm
What it didAn append-only record, never changed
Frameworks we work to
- NIST CSFWork mapped to the framework
- NIST AI RMFWork mapped to the framework
- SOC 2We led a program for a client
- AnthropicDirect commercial terms and a data processing agreement
Limits we state plainly
- Zero data retention
Available through the API, not the chat interface.
- Security review
Each build gets a named review before launch.
For keeping client identifiers out of AI tools, see Redaction for AI and court filings.
Send security questionnaires through the start page.
Tell us what you want built.
A working session is 45 minutes on one idea from your company: what to build, what it needs, and what it would cost.
- A fixed price before we build
- Your data stays in your environment
- A record of every action
- Reference calls under NDA
- NDA before the first session
- Since 2019