Data inside Russia
stored and processed in the Russian contour
Encryption in transit
and encryption on disk at rest
Training on your data
models are never fine-tuned on customer dialogues
Secure by default
The contour under control
Security is not a slide — it is a set of working mechanisms. Here are the main ones.
Tenant isolation
Every company lives in its own space — the data never crosses over.
Keys in the vault
Credentials and tokens live in secure storage — not in the code and not in the dialogues.
Role model
Owner, administrator, operator, guest — each with exactly their own rights.
Action log
Who changed what and when — visible to your security team.
Rate limits
Protection from brute force and overload: requests are rate-limited.
Backups
Regular backups and a rehearsed restore.
Data at the centre
Your data in the centre, the perimeter around it. Encryption, roles and isolation hold the border; the log, the vault and monitoring run inside it without a break.
Do not take our word for it, check
We are for audits, not promises. The architecture description, data-flow diagrams, connector action lists and the call log — all handed to your security team before launch.
On trust.
Every access and every external call is agreed and recorded.
Contours.
The data never leaves the perimeter you chose — the Russian cloud or your own.
Transparency.
The action log is available to your security team.
You choose the perimeter
One and the same product, three degrees of isolation. From a managed cloud in Russia to an install with no internet access at all.
Reliability in numbers
Security without availability is worth nothing. The platform is observable at every node, and recovery is a rehearsed procedure rather than heroics.
Availability
the target service level
Monitoring
metrics and alerts on every node
Detection
alerts arrive before complaints
Data incidents
in the whole history of the platform
Ready for your audit
Bring your security team in from day one We send the architecture description and answer the questions before the pilot, not after.
Test it on your own data
Upload your own documents and catalogue — then ask the assistant the questions people ask you. That is the only test that means anything.