ISO/IEC 27001
Certified information security management system covering how we build, run and support Chat4ED.
Security & architecture
Your data stays where your regulator expects it.
Chat4ED runs in our cloud, your cloud account, your data centre or a fully air-gapped network. On-premise and air-gapped deployments use locally hosted language models and never call an outside AI provider.
Data flow
On-premise: nothing leaves your network.
Questions, schemas, queries and results all stay inside your perimeter. The language model runs next to your data.
Your network
Chat4EDContext Engine · multi-model verification · local LLMs · audit log
Your dataWarehouses, databases, ERP, documents
Chat4EDContext Engine · multi-model verification · local LLMs · audit logYour teamsChat4ED app, Teams, Slack, API
Outside AI providersNot called in on-premise and air-gapped deployments
Deployment
Your data. Your network. Your models.
Run Chat4ED wherever your security team is comfortable, from managed cloud to fully air-gapped.
Chat4ED Cloud
Fastest start. Fully managed by us.
- Live in days
- Automatic updates
Private cloud
Deployed in your own AWS, Azure or GCP account.
- Data never leaves your VPC
- Your keys, your logs
Most popular in BFSI
On-premise
Runs on your servers with locally hosted LLMs.
- No calls to outside AI providers
- Pay for hardware, not tokens
Air-gapped
For the most regulated environments.
- Zero internet access
- Offline install & updates
Works with local or hosted models:
Llama
Qwen
Mistral
Falcon
Sarvam
GPT
ClaudeYour fine-tuned model
LlamaQwenMistralFalconSarvamGPTClaudeYour fine-tuned modelCompliance
Independently certified and audited.
SOC 2 Type II
Independent audit of our security controls operating over time. Ask us for the report.
GDPR
Personal data is processed in line with the EU General Data Protection Regulation.
Controls
The same controls on every answer, wherever it runs.
Role-based access
People only see the rows and columns their role allows. Access follows your existing SSO groups.
Masking of sensitive fields
Account numbers, names and other sensitive fields are masked for roles that should not see them.
Full audit trail
Every question, generated query and answer is logged with who asked it and when.
Single sign-on
Sign in through your identity provider, such as Okta, Microsoft Entra ID or Auth0.
Multi-model verification
One model writes the SQL, a second reviews it and a third validates the result. If they disagree, Chat4ED asks instead of guessing.
Your keys, your logs
In private cloud, on-premise and air-gapped deployments, encryption keys and logs stay in your environment.