Security
For the people responsible for data in your company: what stays inside, who sees what and what gets recorded
Your data stays on your server
Documents, chats, users and indexes live on the server in your company. Our systems only receive the contract and a few numeric metrics.
You decide what goes out
Web search and models from external AI providers are switched on only from your instance's panel. Nobody can turn them on remotely and every change is logged.
Everyone sees only their own files
borc inherits the permissions of your network folders. Documents a person cannot open are excluded before they reach the model.
Sign-in with a second factor
Local accounts use a second factor: a code or a passkey. On domain or SSO sign-in the administrator can turn it off. People can also sign in with Active Directory, Microsoft Entra ID, Google or SAML.
No action without permission
Reading is free; writing to a system or sending data out asks for confirmation. The administrator sets how permissive any chat may be.
Defence against malicious content
Web pages, documents and system replies are cleaned before they reach the model. The local classifier, when on, removes suspicious passages. An instruction hidden in a text does not become a command.
Everything is recorded
Sign-ins, approvals, settings changes and opened web pages go into the activity log, visible from the panel
Signed updates
Every update is signed offline and verified before it is installed. If you ask for it, it waits for your approval.
Questions from your IT team?
Bring your IT lead to the free consultation: we answer point by point
Book the free consultation