Skip to content

Trust center

Your data stays under your control. Here's how.

Privacy, security and governance are the reason teams choose Aegis over a public AI service. These controls apply across every Aegis product.

At a glance

What never happens to your data.

Whichever deployment you choose, the promise is the same: dedicated hardware, data under your control, and no public AI.

  • Your documents, questions and answers are never sent to a public AI provider.
  • The AI model makes no calls to OpenAI, Anthropic or Google.
  • Your dedicated server is never shared with another customer.
  • With web search off, Aegis Chat sends no outside traffic at all.

Deployment options

Two ways to deploy. Both on dedicated hardware.

The server is never shared with another customer, and no data goes to a public AI service.

  • On-premises

    Where it runs
    A dedicated GPU server installed at your site.
    Best for
    Companies that want the hardware in their own building.
  • Aegis private cloud

    Where it runs
    A dedicated GPU server hosted and managed by Aegis, reserved for one customer.
    Best for
    Companies without IT staff or server space. The fastest way to start.

Audit log

A record your auditors can trust.

Every question and answer is recorded with the user, the time, and the documents and data sources used.

  • Append-only: entries can't be edited or deleted
  • Tampering is detectable
  • Filter by user, date or product
  • Export to CSV for an auditor's request in minutes
Audit log· append-only
Illustrative data
Illustrative audit log with fictional data: time, user, product, query, data source and status
TimeUser · productStatus
09:41:07qa.leadAsk & AnswerLOCAL ONLY
09:40:52planner.02Ask & AnswerLOCAL ONLY
09:40:31ap.clerkInvoice AgentNEEDS APPROVAL
09:39:58sales.04Aegis ChatSEARCH BLOCKED
09:39:12eng.leadAegis ChatSEARCH CLEARED
09:38:44controllerAsk & AnswerLOCAL ONLY
Tamper check: intact · entries can't be edited or deleted

Controls

Every control, in one place.

One login, one permission model and one audit log govern Ask & Answer, Aegis Chat and every task agent.

  • Dedicated hardware, on-site or private cloud

    The whole platform, including the AI model, runs on a dedicated GPU server: installed at your site, or hosted by Aegis on a private cloud server used only by you.

    Why it mattersDocuments, questions and answers stay under your control and never go to a public AI provider.

  • Private AI model

    The AI model runs on your dedicated server, with no calls to OpenAI, Anthropic or Google.

    Why it mattersNo per-seat AI subscription, and no vendor training on your data.

  • Append-only audit log

    Records every question and answer with the user, the time, and the documents and data sources used. Entries can't be edited or deleted, and tampering is detectable.

    Why it mattersGives auditors a complete, trustworthy record.

  • Searchable, exportable audit trail

    Filter the log by user, date or product and export it to CSV.

    Why it mattersAnswering an auditor's request takes minutes.

  • Role-based access control

    Users see only the departments, documents and data their role allows.

    Why it mattersThe warehouse doesn't see payroll; sales doesn't see margins.

  • Per-user data isolation

    Files a user uploads are visible only to that user.

    Why it mattersPersonal work stays personal.

  • Single sign-in, admin console

    One login for every product, with user management for admins.

    Why it mattersOne system to govern instead of a dozen AI tools.

  • Connects to existing systems

    Connects to any system with a database or an API, such as QAD, D365, Sage 50 or QuickBooks, plus your documents: SOPs, user guides, policies and other documentation.

    Why it mattersNo data migration or rip-and-replace.

  • Fixed, predictable cost

    One server, no per-token AI charges.

    Why it mattersBudget once; usage growth doesn't raise the bill.

Aegis Chat web search

The internet is opt-in, per conversation.

Web search in Aegis Chat is turned on per conversation. Off means no outside traffic at all. On means every outgoing search is scanned for sensitive data and blocked if any is found, and every web-sourced claim carries a numbered, verified citation.

  • Hard off switch

    No outside traffic unless a user turns search on.

  • Leak screening

    Outgoing searches with sensitive data are blocked.

  • Verified citations

    Unsupported citations are removed.

Built for regulated work.

Aegis is designed to support audit-trail requirements in regulated industries such as FDA GMP manufacturing: every AI interaction is logged and attributable, access is restricted by role, and the log is queryable and exportable.

Security documentation

An architecture overview and responses to common security questionnaires are available on request — contact us to ask.

Security FAQ

Security questions.

Can't find what you need? Call us or book a demo and we'll walk through your setup.

Where does my data go when someone asks Aegis a question?

Nowhere outside your control. The whole platform, including the AI model, runs on a dedicated GPU server, either installed at your site or hosted by Aegis on a private cloud server used only by you. Private cloud servers are reached only over zero-trust networking: every user and device is authenticated before it can connect, every connection is encrypted end to end, and the network is managed on our own infrastructure rather than a third-party service. Documents, questions and answers never go to a public AI provider.

What's the difference between on-premises and the Aegis private cloud?

Both use dedicated hardware that is never shared with another customer. On-premises puts the GPU server in your own building. The Aegis private cloud is a dedicated server that we host and manage for you, the fastest way to start if you don't have IT staff or server space.

Which AI model does Aegis use?

A private AI model running on your dedicated server. It makes no calls to OpenAI, Anthropic or Google, so there's no per-seat AI subscription and no vendor training on your data.

Is Aegis compliant with FDA requirements?

Aegis is built for regulated work. It's designed to support audit-trail requirements in industries such as FDA GMP manufacturing: every AI interaction is logged and attributable, access is restricted by role, and the log is queryable and exportable.

Can web search be turned off?

Yes. In Aegis Chat, web search is turned on per conversation, and off means no outside traffic at all. When it's on, every outgoing search is screened for sensitive data and blocked if any is found.

Who can see what?

Role-based access control limits each user to the departments, documents and data their role allows, so the warehouse doesn't see payroll and sales doesn't see margins. Files a user uploads are visible only to that user.

Want to walk your security team through it?

Book a demo and bring your questions about deployment, access control and the audit log.

Or call +1 (833) 615-5566