Security

AI you can actually trust with your data

Security is not a feature we bolt on at the end, it is how we build. Your data stays in your environment, access is controlled and logged, and nothing you give us is ever used to train a public model. We design for the standard a NZ or AU board would expect to sign off.

Let’s talk See how it works

Your data stays yours

Agents run against your systems inside your boundary. We do not pool your data with other clients and we never feed it into public model training.

Talk to us about this

Access controls

Role based permissions, least privilege service accounts and scoped API keys mean every agent only touches what it genuinely needs to do its job.

Talk to us about this

Audit logs

Every action an agent takes is recorded with who, what and when, so you can review, explain and prove exactly what happened at any point.

Talk to us about this

Data residency

Hosting in New Zealand and Australian regions where you need it, with encryption in transit and at rest, to keep you onside with local privacy expectations.

Talk to us about this

What it does

Capabilities

No training on your data, ever
NZ and AU data residency options
Role based access and least privilege
Full audit trail of agent actions
Encryption in transit and at rest
Scoped, rotatable API keys and secrets
Human in the loop on sensitive steps
Privacy Act 2020 aware data handling

Why it holds up

Built on four things we don’t bend on.

Honesty

We tell you what AI can and cannot do, then we ship the part that pays for itself.

Craft

Production systems, not slideware. Built around how you actually work.

Speed

Find the one workflow costing the most, ship it to production, prove the return.

Care

Success is hours given back to people and dollars saved. Never the size of the invoice.

Questions

FAQ

Does our data ever get used to train a public model?

No. Nothing you give us is ever used to train a public model, and we do not pool your data with other clients.

Who can access what the agent does?

Access is role based, with least privilege service accounts and scoped API keys, so every agent only touches what it genuinely needs to do its job.

Can we prove what an agent did after the fact?

Yes. Every action an agent takes is recorded with who, what and when, so you can review, explain and prove exactly what happened at any point.

Where is our data actually hosted?

We host in New Zealand and Australian regions where you need it, with encryption in transit and at rest, to keep you onside with local privacy expectations.

Get in touch

Talk to us about security

Tell us what you’re trying to do and we’ll reply with how we’d build it, no obligation.

You get the upside of AI without handing over control, with a system your security and compliance people can review, approve and stand behind.

Let’s talk