Never shared, never used to train models. Per-account isolation and full audit trails, built to pass your toughest vendor review.
Last updated 3 October 2026
Never used to train or fine-tune any model. Leave whenever you want, with everything.
Single-tenant: a dedicated environment per client, with its own database, storage, encryption key and compute. Export anytime in Excel or CSV. Full deletion within 30 days of exit, backups included, confirmed in writing.
Your choice of model. Model providers never see your data. No prompts or responses retained.
Anthropic, OpenAI or Google models through Amazon Bedrock, Azure OpenAI, Google Vertex AI or your own LLM gateway, on private endpoints in your region. Optional Tacit AI models run entirely inside your environment.
The AI proposes, your engineers approve. Nothing changes in your records without sign-off.
No write access to your systems of record. Every output cites its source evidence. Risk scores are calculated deterministically, so results are reproducible and auditable.
Dedicated cloud, your own cloud, on-premise or air-gapped. Your data stays in your region.
A dedicated AWS environment, live within days, or your own AWS, Azure or Google Cloud account under your own keys. On-premise or fully air-gapped for classified sites. Residency in the US, EU, UK, Canada, Asia Pacific or South America.
Your team signs in through your identity provider, under your own policies.
SSO with Microsoft Entra ID, Okta, Google Workspace or any OIDC provider. MFA through your IdP or built-in authenticator apps. Granular role-based access, enforced server-side. Tacit AI never sees a password.
Encrypted at rest and in transit, under a key that belongs to your environment alone.
AES-256 at rest with a dedicated, auto-rotated key per client, or bring your own key. TLS 1.2+ in transit. AI traffic never crosses the public internet.
Every access, change and approval is logged. When an auditor asks, you have the answer.
Full application and infrastructure audit trail, exportable to your SIEM. Web application firewall and continuous threat detection.
Your work is protected, recoverable and never dependent on us.
Hourly encrypted backups: a one-hour recovery point and a one-business-day rebuild. Security incidents notified within 24 hours. Critical vulnerabilities fixed within 7 days.
Controls aligned to SOC 2 and NIST CSF, with a SOC 2 examination in preparation.
Mapped to ISO/IEC 27001:2022 Annex A. GDPR processing under a data processing agreement. AWS is the only sub-processor. Professional liability insured. Your team can audit and penetration-test its own environment.
Get the full security package under NDA: a control-by-control verification document, our data processing agreement and insurance certificate. Evidence comes from your own environment, never another client’s.
