Australian residency
Every byte lives in Sydney — application, database, object storage and the model endpoint. No offshore routing, no cross-region replication.
Security & trust
Security you can
audit
Honest controls, not aspirational marketing. Everything below is either running today or has a date against it — where something is in progress, it says so.
See the data path
Sydney residency on every plan
Four commitments
Tenant isolation
Tenant context is set fail-closed before any primitive runs. A skill that cannot resolve its tenant does not execute; it errors.
Never trained on
Your content is never used to train a model, ours or anyone else's. The Gemini endpoint is region-locked and stateless between calls.
Fully auditable
Every run writes who triggered it, what it touched, what it produced, and who approved it. Exportable on Growth and above.
Where a request actually goes
User in Australia
The request originates in Teams, web or Slack. TLS 1.3 in flight, no exceptions.
Sydney load balancer
Terminates at GCP's australia-southeast1 edge. There is no path that leaves the region.
Cloud Run · Sydney
Tenant context is resolved and pinned before a single primitive runs. Fail-closed, not fail-open.
Vertex AI · Sydney
A region-locked Gemini endpoint. Prompt in, completion out, nothing retained, nothing trained on.
Cloud SQL + GCS
Encrypted at rest with 30-day backups. Zero cross-region replication, by configuration not by promise.
Certification
ISO 27001
Committed within 12 months of contract execution if you require it.
SOC 2 Type I
In progress. Type II follows roughly six months after Type I lands.
Questionnaires
We answer yours — no portal, no runaround. Usually inside three business days.
Retention
WhatHow long
Chat historyTenant-configured. Default: last 10 conversations per user.
Skill run logs18 months, then purged. Exportable at any point before that.
Connector tokensAES-GCM encrypted at rest. Revoked immediately on disconnect.
Deleted tenant dataHard-deleted within 30 days, backups included.
Ask us the hard questions.
Send your security questionnaire, or book a call with the person who built the isolation model. Not a sales engineer reading a script.
Talk to security