Security
Enterprise-grade security, by default.
The beast is powerful, but it is also disciplined. Your data is encrypted, isolated, audited and — if you want — never leaves your own infrastructure.
Encryption everywhere
TLS 1.3 in transit and AES-256 at rest for every index, document and embedding.
SOC 2 Type II
Independently audited controls for security, availability and confidentiality.
SSO & RBAC
SAML / OIDC single sign-on with fine-grained role-based access control.
Private deployment
Run inside your own VPC or fully on-prem — your data never leaves your perimeter.
Audit logging
Every query, ingest and admin action is logged and exportable for compliance.
Tenant isolation
Strict logical and optional physical isolation between workspaces.
Compliance
SOC 2 Type IIGDPRCCPAHIPAA-readyISO 27001 (in progress)
Need a security review, SOC 2 report or DPA? Contact our security team.