Trust & security
Built for ops teams who get audited.
PII tokenisation runs in your region. Your raw conversations never cross the network boundary. Your model artifacts are versioned, evaluated, and rollback-safe.
SOC 2 Type II
Audited annually; evidence library available under NDA.
GDPR + DPA
Right-to-erasure via token map deletion. EU sub-processors disclosed.
HIPAA-ready
PHI processed on-prem only; cloud runtime sees tokenised manifests.
ISO 27001 (in progress)
ISMS controls mapped; certification expected Q3 2026.
Data residency
us-east-1 · eu-west-1 · ap-south-1 · me-south-1 · sa-east-1.
On-prem option
Single-tenant on your own GPU farm. We deploy & monitor.
Audit everywhere
Per-tenant audit log with PII de-tokenisation chain-of-custody.
BYOK + KMS
Bring your KMS for at-rest encryption keys. Annual rotation enforced.