SECURITY
A private AI server is only as safe as the way it's run. Here's how we set up and operate yours.
Every deployment is configured for the security and privacy requirements your organization works under. For organizations that handle health information, the HIPAA edition is HIPAA-aligned, with locked safeguards. Compliance depends on your whole program, and we document our part so your reviewers can check it.
Encryption, multi-factor sign-in, network segmentation, restore planning and regular testing are part of the design, not add-ons. The HIPAA edition is built to the proposed HIPAA Security Rule updates, which aren't final yet.
One less internet-facing service holding your data shrinks the blast radius. But a neglected server in a closet is worse than a well-run cloud. That's why monitoring, patching and testing are part of every engagement.
Documents, chats, search indexes, transcripts and audit logs are stored on encrypted drives on a server in your building that you own. Backups go to storage you control, encrypted with a key you hold.
Your server
Health metrics and error codes only
Allow-list · free text removed
Signed updates only
Saddle Tree updates & monitoring
In the HIPAA edition, these are locked settings. A customization can't turn them off.
| Control | HIPAA edition | Standard edition |
|---|---|---|
| Encryption at rest | Full disk, unlocked by the TPM chip plus a network key or PIN. A stolen server won't unlock off site | Full disk, unlocked by the TPM chip |
| Encryption in transit | TLS for every browser connection, and mutual TLS between services inside the server | TLS for every browser connection |
| Sign-in | Single sign-on with your accounts. Multi-factor required and checked at every login. No shared accounts. Logoff after 15 minutes idle | Single sign-on with your accounts. Multi-factor strongly recommended |
| Access | Roles control models, documents and workflows. Each workflow uses only the data fields its job needs. Quarterly access-review report | Roles control models, documents and workflows |
| Departing staff | Lose access at the next directory sync | Lose access at the next directory sync |
| Audit log | Every prompt, response, document retrieved, workflow action, admin change and support session. Tamper-evident and append-only. Reading the log is logged too | Sign-in, admin and configuration events. Prompt logging optional |
| Backups | Nightly, encrypted, plus an offline copy on storage you control. Quarterly restore test with written evidence, and a documented restore plan | Nightly, encrypted, to storage you control |
| Testing | Vulnerability scans every six months and an annual third-party penetration test | Annual vulnerability scan |
| End of contract | Data returned or destroyed, including cryptographic erasure, with a certificate of destruction | Data returned or destroyed |
Your admin approves each time-limited session in the dashboard. Every session uses multi-factor sign-in and is recorded in your audit log. In the HIPAA edition, sessions are short, come only from our company-managed, encrypted laptops, and no files are copied off your server. During an approved session our team may see your data, which is why access is approval-only and every session is logged.
Every update is cryptographically signed. Your server checks the signature before installing anything, and pulls updates over an outbound-only encrypted connection. We never need an open port into your network.
Each update runs on our lab system and an early-release site first. Model changes happen only after they pass quality tests on your own examples.
Your server backs up before updating, runs health checks after, and rolls itself back automatically if anything fails.
Routine updates are monthly. Critical security patches are expedited. You approve maintenance windows, and you can put updates on hold.
Every output is a draft until a professional on your team approves it. Nothing is written directly into your core systems. In the HIPAA edition, outputs are labelled "AI draft: requires professional review," and clinical-decision uses are switched off. Our software doesn't diagnose, give legal advice or give tax advice.
We'll answer it plainly, and tell you where the answer is "not yet."