Security
Your data stays where you decide.
Before any model work starts, we agree the boundary with you: where the data lives, who can reach it, what the model may do and who signs off each release. When the data cannot leave your building, we work offline on site with our own machines.
Where the data lives
Your material, the datasets built from it, the model, its adapters, the running service and its logs all stay inside the boundary we draw together.
| Where | Suits | You receive |
|---|---|---|
| Your Macs | Teams that want models on their own Apple Silicon machines. | Setup notes for each machine and the runtime. |
| Your server room | Training and serving on GPUs you own. | An environment record and an operator runbook. |
| Your private cloud | Dedicated infrastructure with controlled ways in. | An architecture diagram and access notes. |
| Your cloud account | Deployment inside a cloud boundary you have already approved. | A record of how data moves and how the service runs. |
| An air-gapped room | Environments with no connection to the outside. | How files come in, how updates happen and how evidence is handled. |
| Devices in the field | Models that run next to machines, sensors or people at work. | How devices are updated and what runs on each. |
What every project leaves behind
So your security team can review the work without taking our word for it.
Constraint register
Your privacy, compliance and deployment constraints, written down before work starts.
Dataset card
Every source, every change, everything excluded and how long it is kept.
Training record
The base model, data, adapter, runtime and settings behind each run.
Evaluation report
The tests, the results, the failures and the known limits.
Runbook
How to install, reach, monitor and roll back the model, and who owns it.
Change log
What changed in the model, data, adapter or runtime, release by release.
Who decides what
What we provide
Architecture, access paths, deployment runbooks, evaluation evidence, documentation and support for your own review.
What you and your advisers own
The legal basis for using the data, policy approval, identity and user management, internal audit, certification and regulatory filings.
Read more: Responsible use · Security review
Every commission begins with a conversation.
Tell us what the work is, what data you keep and where it has to run. We reply within two business days.