Hardened by design
Every architecture we deploy is built from proven, security-reviewed components and tested before handover. Penetration testing and ongoing assessment are part of the engagement, not an afterthought.
Our stance on security
Secure and compliant by default
Security and compliance are not features we bolt on later. The architecture we design for you (yours to own, with optional delivery and managed service) is built to keep your company and employee data private, UK-resident and auditable from the first day it goes live.
Internal Security
How we protect your data, internally
Data stays in your boundary
The stack runs inside your own tenancy, prompts and data do not leave your control. Everything encrypted at rest and transit, secrets and credentials managed to industry best practice.
Least-privilege access
Access to tools, resources and data is restricted by role and least privilege, with time-bound controls. The right checks and regulatory fluency that touches sensitive or patient-identifiable data.
Product security
Security built into the platform
01 / 05
Flexible access management
Manage roles, permissions, and access policies, with optional Single Sign-On (SSO) integration for centralised control.
02 / 05
Refined user permissions
Manage access to AI services with granular permissions, ensuring secure and streamlined interaction with your data.
03 / 05
Data storage flexibility
Because the stack is deployed inside your boundary, your data is never stored or processed outside your tenancy unless you explicitly configure it to be.
04 / 05
Advanced data protection
Sensitive information is scrubbed and masked before it reaches any model, using configurable data-control rules and screening tuned to your obligations, including NHS DSPT v8 and EU AI Act obligations.
05 / 05
Real-time monitoring
Track user activity and identify potential security risks with AI Gateway's real-time monitoring and automated alerting capabilities.
Data privacy
AI Gateway's commitment to data privacy
We uphold the highest regard for privacy. Our dedicated efforts include these key commitments:
Privacy policy
Our approach aligns with UK GDPR, the Data Protection Act 2018, the EU GDPR, and sector regimes such as the NHS Data Security and Protection Toolkit (DSPT).
UK GDPRDPA 2018NHS DSPT
Privacy at our core
Your data is yours. We never sell nor store user-generated content without your permission.
Data processing agreement
Our DPA aligns with GDPR requirements, ensuring compliant data handling.
Data transfer
Our Standard Contractual Clauses ensure compliance in user data transfer and storage.
ISMS Team
We've appointed a dedicated officer and ISMS Team to oversee ongoing compliance efforts.
Secure data handling
We implement and follow industry best practices for data security and privacy protection.
Secure by default
Say yes to AI, safely
Give your people governed access to AI, designed for your boundary and proven to your regulator, with your data, models and compute in your control. Book a discovery call.