Single tenant by construction
One firm per node. There is no pooled inference layer and no neighbouring tenant to be isolated from.
Platform / Enclave
The runtime that never phones home
A single tenant execution environment on hardware you control. Model weights, index, and documents share one boundary, and that boundary has no outbound path.
Zero egress
No socket is opened to a non loopback interface for the life of a session. The counter in the console reads the real figure.
Ephemeral by default
Document tensors live in tmpfs. Teardown wipes working memory and leaves nothing recoverable from disk.
Detail
The specifics
Enough for a technical reader to judge fit. The full architecture goes to your reviewers under NDA.
Architecture whitepaper- Your data centre, your private cloud tenancy, or a dedicated appliance
- Process, namespace, and storage separation between runtime, index, and corpus
- SHA-384 chain, verifiable from inside the enclave
- Model and runtime updated in place, with no document movement
- Local telemetry only. Observability never requires an outbound connection
See it running inside your own enclave.
Bring a matter and a security question. We run the platform against documents you choose and answer both in the same session.