Skip to content

Security

Your data, under your control.

Security isn't a page we added at the end — it's why several of our products are built to run entirely on your own hardware. Here's how we approach it, in plain language.

On-premise available
Private AI
EU-hosted analytics

You choose where your data lives

Every system we build can be deployed the way your risk profile demands:

  • On-premise — runs on your own hardware, inside your network. Products like NSource are designed so documents and AI processing never leave your machines.
  • Cloud — hosted infrastructure with automatic backups and around-the-clock monitoring.
  • Hybrid — sensitive workloads stay on your hardware while the rest runs in the cloud.

Private AI, not shared AI

For sensitive work, we build on AI that runs locally — models served with tools like Ollama and Whisper on your own machines, with local vector storage — so prompts, documents, and results stay inside your network. Where a project uses cloud AI providers instead, we say so upfront and you approve which providers touch your data before anything is built.

How we work

  • Security is part of the design from day one — access control, encrypted connections (HTTPS/TLS), and least-privilege by default.
  • Fine-grained, role-based access in systems that need it — NControl ships with approvals, versioning, and full audit trails.
  • Automatic backups and monitoring for systems we host and operate.
  • Your data is yours: we don't reuse client data across projects, and we hand over code and documentation so you're never locked in.

This website

The site itself is a static site served over HTTPS. Contact-form submissions go through Netlify Forms, and analytics and masked session replays run on EU-hosted PostHog without sending contact details. Details are in the Privacy Policy.

Questions, questionnaires & disclosures

Working through a vendor-security review, or found something that looks off? Email [email protected] — we answer security questionnaires for prospective clients and take vulnerability reports seriously.

Handling sensitive data? Tell us your constraints — we'll design around them.

Book a technical consultation