Security
The security model
AI gets access to the company’s most sensitive data. So security is built into the architecture, not added later.
Six rules
Your data stays under control
NDA before any work
We sign a non-disclosure agreement before the assessment starts and before any data access.
No training of third-party models
Your data is never used to train third-party models. This is written into the contract.
Deployment of your choice
In the cloud, on your servers or in an air-gapped perimeter on local models with no internet access.
Role-based access
An agent sees only what the user it acts for is allowed to see.
Action log
Every agent request and action is logged with its author and time.
Human approval
Significant actions, such as client emails or changes to the books, run only after approval.
Where data is stored
You choose the perimeter
| Cloud | Client servers | Air-gapped | |
|---|---|---|---|
| Where data is stored | Cloud in a chosen region | Your infrastructure | Your infrastructure |
| Models | Cloud, under contract | Cloud via gateway or local | Local only |
| Internet access | Yes | Restricted by gateway | No |
| Time to launch | Days | 1-2 weeks | 2-4 weeks |
Log
Every agent step is recorded
The log is stored inside your perimeter. It can be exported to a SIEM or handed to an auditor.
| Time | User | Agent | Action | Status |
|---|---|---|---|---|
| 10:42:07 | N. Yusupova | Receivables agent | Read 1C settlements, 5 counterparties | done |
| 10:42:11 | N. Yusupova | Receivables agent | Drafted 3 reminder letters | awaiting approval |
| 10:44:30 | D. Karimov | Receivables agent | Letters sent after approval | done |
| 10:51:02 | A. Rakhimov | Contracts agent | Request for contract No. 112: no permission | denied |
Example, illustrative data
Security
Documents
- 01NDA before the assessment
- 02Contract prohibiting model training on your data
- 03Architecture and data flow description
- 04Access policy and role model
Let’s start with an assessment
In two weeks you will know where AI pays off.