Trust
How we handle your data
Data lives inside your perimeter. Sensitive data never trains. Everything goes into an audit log compliance reads without asking us. And what we don’t have yet, we say with a date.
01 · Where it lives
On your hardware, on a segmented network with no internet egress
Sensitive or confidentialhealth, biometrics, credit, trade secrets
Always inside the perimeterconsulted at answer time; never trains
Internal, not sensitivemanuals, policies, catalogs
Inside by defaultenterprise cloud only if compliance approves
Public or creativebrand manual, published pieces
Commercial models to builda model in your company to operate
Who decides: the Assessment’s final report, signed by your Legal team. With the hardware on your site, nothing leaves your perimeter or the country.
02 · What goes into training
No end-customer data. Ever.
Goes in
Approved answers with masked personal data, product documents and policies, the brand manual, images with rights and examples written by your experts.
Never goes in
Individual files; identifiable health, biometric or financial data; anything you would not want reproduced word for word. It is consulted at answer time, with permissions and a record.
03 · Who has access and what is logged
Named people, two-factor authentication, recorded sessions, a complete audit log
1
Access
Only the people named in the responsibility matrix, through a jump server approved by your security team, with two-factor authentication and a recorded session. Any subcontractor is declared in the data processing agreement.
2
Audit log
Every question, every document consulted, every answer and every action, with user and version. Compliance has access without intermediaries. Minimum retention of six months.
3
Confidentiality
Confidentiality covers every person and survives the end of the service, as Mexico’s data protection law requires and, in insurance, the Insurance and Surety Institutions Law.
4
Exit
The model weights, its adapters, the tests and the audit log are yours and are exported at no cost in a standard format. Certified deletion. The exit plan is tested every year.
04 · Real status
Certifications and insurance, with a date
What does not exist yet is stated with its plan. It is never left out.
×
ISO 27001, SOC 2, ISO 42001
Not certified as of November 2, 2026. We don’t claim it. With your own hardware, the system runs under your own security controls, and we deliver the documents an auditor of those standards would ask for.
→
Insurance and legal entity
Professional liability and cyber insurance being contracted; legal entity being incorporated as of November 2, 2026. This is updated here before every meeting with procurement.
The data on this site
The Discovery form asks for name, company, title, email and industry, and is used only to answer the request. It is not shared and does not go into any model. Visit measurement is anonymous and only runs if you accept it.
05 · Frequently asked questions
What the data protection officer asks
What data leaves my perimeter when I use private AI?
None, when the model runs on your hardware inside a segmented network with no internet egress. Sensitive and confidential data is processed inside the perimeter, without exception. Internal, non-sensitive data may use an enterprise cloud with zero retention only if compliance approves. Public data stays free.
Do you use our customers’ data to train the model?
No. No end-customer data goes into training. The model learns voice, format and craft from approved, masked answers, product documents and examples written by your experts. Sensitive data is consulted at answer time, with the user’s permissions and a record of every access.
Who owns the trained model and what it produces?
You do. The model weights, its identity adapters, the tests and the audit log belong to the client and are exported at no cost in a standard format. The base model keeps its open license. Work generated solely by a machine has no copyright; your brand is protected by trademark registration and every piece goes through your approval queue.
What happens if the AI vendor disappears or defaults?
With the hardware on your site, you already have everything in your company: hardware, model weights, knowledge base, audit log and manuals. The exit plan sets format, deadlines, transition and certified deletion, and it is tested every year. When the hardware is ours, optional escrow of models and code with a third party is available.
06 · Next step
Discovery sessions, no commitment
With technology, compliance and two process owners. Includes an offline demonstration prepared for your sector, without using your company’s data.
1
Inventory and obligations
Data in four levels and a first review of what your sector requires.
2
Three candidate use cases
And the Assessment proposal. The Discovery is credited against the Assessment.
3
Founding clients program
Three seats, with an explicit discount in exchange for a publishable case and a reference.
Terms
Discovery and evidence pilot at no cost, Assessment at a discount, in exchange for a publishable case, a reference and feedback. Continuous operation is always paid at list price.