Security & sovereignty
Sovereign by default. Hybrid by design.
Documents, AI inference and the audit trail run on infrastructure we control in the United Kingdom. Where an engagement calls for an external AI model, it is used only under your approved policy, and every call is logged.
Hosting
United Kingdom. The platform runs on UK infrastructure under UK jurisdiction.
AI inference
Local by default. External AI models are used only where your data policy permits; every external call is logged, and your content is never used to train anyone else’s models.
Encryption
In transit and at rest, with controlled key management.
Access control
Role-based access on every operation, human and agent alike.
Audit
An immutable record of every action: who did what, when, and with which document.
Data protection
UK GDPR and Data Protection Act 2018 posture documented and available on request.
For a detailed architecture and controls briefing under NDA, talk to us.