ThinkPort / Security
Your files stay put. Only what's needed crosses the line.
Private storage, dedicated processing and policies you control. Your teams get better answers while sharing only approved context with AI providers.
Controls
Six controls, on from day one.
Data residency
Indexes and logs live in the region you choose. EU by default.
Your keys
Bring your own encryption keys. Revoke them and the data is unreadable.
Encrypted everywhere
TLS 1.3 in transit, AES-256 at rest, isolated per customer.
Signed receipts
Each request is logged with what crossed, what was withheld and which model answered.
No training on your data
Model providers are contracted for zero retention. Your prompts never train anyone's model.
Private bucket & dedicated GPU
A private data bucket with a dedicated GPU on a machine, provided by ThinkPort or running on your own machine and GPU.
Questions from security teams
The things you'll ask us first.
Do our documents get uploaded to the AI provider?+
No. Documents are indexed inside your environment. Only the specific passages needed to answer a question are sent, after your policy has been applied.
Can we stop certain information from ever leaving?+
Yes. Policies can always withhold fields such as names, salaries, client identifiers or anything matching your own patterns.
Who can see the receipts?+
Admins and the reviewers you assign. Receipts can be exported to your existing logging or compliance tools.
Which certifications do you hold?+
We'll share our current compliance documentation and audit status during your security review.