Security→

Secure by design.Built to your standards.

Every system we build is designed around your security and compliance requirements, from HIPAA to your own internal policies. We integrate the controls you need and never train models on your data.

Discuss your requirements →Deployment options

Our principles→

Three commitmentson every project.

These hold regardless of industry, model or where the system runs.

Your data stays yours

We never use your data to train public AI models. You own your data and the outputs of the systems we build for you.

Least access, by design

Each workflow only touches the systems and records it needs, with permissions scoped to the job and nothing more.

Humans stay in control

You decide which actions run on their own and which need a person to approve them. Every decision is logged.

Models and deployment→

The right model,where you need it.

We don’t lock you into one provider. We choose the model and hosting that fit your data, risk and budget.

Option 01

Enterprise model APIs

Leading foundation models through enterprise agreements and cloud platforms such as Azure OpenAI, AWS Bedrock and Google Vertex AI.

Option 02

Inside your cloud

Systems deployed into your own AWS, Azure or Google Cloud account, so data never leaves the environment you already govern.

Option 03

Private and custom models

Open-weight models hosted privately, or a custom model trained for your use case when an off-the-shelf model will not do.

Controls→

Security we build in,not bolt on.

Controls are selected and configured to match your environment and policies.

Encryption

Data encrypted in transit (TLS) and at rest, using your cloud provider’s managed keys or your own.

Identity and access

Single sign-on with your identity provider, role-based access and multi-factor authentication.

Audit trails

A record of what each system read, decided and did, so you can review any action after the fact.

Sensitive data handling

Redaction and masking of personal and health information before it reaches a model, where required.

Retention controls

Retention and deletion rules set to your policy, including zero-retention model endpoints where available.

Monitoring

Alerting on errors, unusual activity and quality drift, with a clear path for a person to take over.

Compliance→

Built to meetyour requirements.

We design systems to meet the frameworks your organization operates under, and work with your compliance team from scoping to launch.

Framework

HIPAA

For healthcare and benefits work involving protected health information.

Framework

SOC 2

Controls mapped to your SOC 2 program and vendor reviews.

Framework

GDPR and CCPA

Privacy requirements for personal data, including access and deletion requests.

Framework

Your policies

Your own security standards, questionnaires and approval process.

Questions→

What security teamsusually ask.

Read our privacy policy →

Do you train AI models on our data?

No. We do not use your data to train public models. If a custom model is the right answer for your use case, it is trained for you, on terms you approve, and it belongs to you.

Can you work with protected health information?

Yes. For healthcare work we design systems to meet HIPAA requirements: HIPAA-eligible infrastructure, access controls, audit logging and minimum-necessary data handling. We’ll walk your compliance team through the architecture before anything goes live.

Do you build custom models?

Usually we don’t need to. Most systems are built on leading foundation models through enterprise APIs. When a use case calls for it, we can host private open-weight models or train a custom model.

Will you complete our security questionnaire?

Yes. Send it with your project details and we’ll complete it as part of scoping, alongside an architecture and data-flow overview.

Get in touch→

Have a security questionnaire?Send it our way.

Share your requirements and we’ll walk your team through the architecture, data flows and controls before anything is built.

Start the conversation →Estimate your ROI