Where your data goes
- Your hostingDocuments, pages, the search index and chat history are stored on your deployment.
- Your AI accountText is sent only to the AI providers you choose, through your own account, asking for no-training handling on every request.
- Nobody elseWe keep no copy of your documents. Pages contact only your own deployment: fonts and scripts are served from it.
Access
- Sign-in with your company Google or Microsoft account (single sign-on), or by emailed code to a known work email.
- Roles and teams enforced on answers, sources, search, pages and shared links. When access rules are missing or out of date, nothing restricted is shown.
- Access changes need an owner’s emailed code. Signing out ends every session on every device.
- Every sign-in, upload, removal and access change is recorded with who did it.
- Encrypted backups, and encrypted storage for connector credentials.
- HTTPS enforced, standard browser protections on every page, and size limits on uploads.
Our access during setup
During setup and support, named Regnor staff can access your deployment. You can remove that access at any time. After handover you can run it without us.
Available when required
We say this plainly so your reviewers do not have to find it:
- External penetration test: available when required, by a CERT-In listed firm, with a summary letter and a retest. Not yet done.
- SOC 2 or ISO 27001: available when a contract requires it. No certificate yet.
- Okta and other identity providers (SAML), and automatic account sync: on request. Google and Microsoft sign-in are ready today.
Tip
Ask us for the Security Summary: one page on where your data lives, who can see what, and what is available on request. A data-flow description and answers to the usual security questionnaire come with it.