Security & Privacy
Small firms deserve strong privacy without enterprise overhead. Our Knowledge Hub is designed to run locally, limit answers to approved sources, and support access control and auditability.
On-prem by default.
The Knowledge Hub is deployed on your server so your documents and processing can remain in your environment. This approach supports privacy-focused teams that do not want sensitive information sent to third-party AI providers.
Knowledge-bound answers.
The assistant is limited to:
- Documents you upload and approve
- Web sources you explicitly allow (allow-list)
If the answer is not supported by approved knowledge, the assistant will say it doesn't know.
Permission-aware answers.
Not every user should see every document. The system supports role-based access so that:
- Users can only retrieve answers from documents they're authorized to access
- Restricted information is not exposed through Q&A
- When an answer requires restricted sources, the system indicates access is required and directs users to request permission
Visibility for oversight.
The system can maintain logs to support governance, such as:
- Who uploaded or updated documents
- Questions asked (and when)
Exact logging details and retention policies can be configured to match your firm's needs.
Protect data in transit and at rest.
We configure secure access and data protection options appropriate for local deployment, including:
- Encrypted connections where applicable
- Secure authentication and access controls
- Guidance on best practices for storage and backups
Security posture depends on infrastructure and configuration. We'll review options during deployment planning.
Clear handling rules.
We can help configure:
- Retention periods for logs and uploaded content
- Backup practices consistent with your operational requirements
- Administrative controls for removing or updating content
What this system will not do.
We believe in being transparent about limitations:
- It will not answer beyond approved sources
- It is not a substitute for professional judgment or review
- It does not automatically grant access to restricted materials
- It cannot guarantee perfect answers — it's designed to show sources and say "I don't know" when unsupported
Want a security walkthrough?
Book a demo and we'll show the permission model, logging, and how on-prem deployment works in practice.
Loading calendar...
Tell us your firm type and approximate team size so we can tailor the demo.