Security & hosting
The cloud edition is EU-hosted, tenant-isolated (row-level security), human-in-the-loop gated, and your data is never used to train models.
Tenant isolation
Section titled “Tenant isolation”Every tenant-scoped table is protected by PostgreSQL row-level security, enforced for the application’s own database role — isolation holds even against application bugs, and it is exercised by an adversarial test suite on every release: cross-tenant reads and writes, forged tokens, hostile payloads, concurrent writers.
AI governance
Section titled “AI governance”- AI output is labelled as AI-assisted in the app and in exports.
- Every AI call passes a deterministic quota gate before it runs and leaves an append-only audit record.
- Nothing AI-drafted reaches a client without a recorded human approval — enforced by the server, not the UI.
Hosting tiers
Section titled “Hosting tiers”| Tier | Where | For |
|---|---|---|
| Cloud | EU (pooled, isolated) | Standard SaaS |
| Dedicated | UAE region, single-tenant infrastructure | Enterprise data-locality preferences |
| Sovereign | Your premises / in-country | Regulated and sovereign estates |
Cross-border questions (including KSA PDPL transfer mechanics) are answered per-deal with a completed transfer assessment — ask, and we’ll walk your counsel through it.
Continuity
Section titled “Continuity”Point-in-time recovery, tenant-level restore drills, and an export path that works in every subscription state — including suspended and expired.