Two deployment shapes, one honest difference between them, and a short list of what ever leaves an instance. A firm evaluating this should be able to check every sentence on this page.
Every firm gets its own instance. On your own server, we cannot read your pipeline: you own the database and the deployment, and the vendor is structurally unable to reach the data rather than restricted from it by policy.
On ours, a confidentiality agreement says we will not. That is a weaker promise than the first one and it is stated as a weaker promise, because a firm making this choice deserves to know which of the two it is buying.
A room checks what it is licensed to run. What goes out with that check is an instance id, a version string, and the firm name and brand colour. No deal, no company, no document, no counts and no timing.
That is not a promise in a marketing page. It is written in the file that performs the check, on your own server, where you can read it.
The seats reason using commercial models, so the material a seat reads is sent to a model provider to be read. On a hosted room that runs through our provider account; on a dedicated room a firm can hold its own key, and the work is on its own account.
Nothing is sent to a founder, an investor or anyone else without a partner pressing send. Every seat that produces a message drafts it and stops.
Most vendors describe one deployment and call it secure. There are two here and they are not equally strong, so this page names the difference rather than averaging it into a sentence that is true of neither.
Dedicated is the stronger promise and it is stronger for a structural reason, not a contractual one: the keys are yours, so there is nothing for us to decide about. Hosted is the convenient one, and what protects your data there is an agreement and the people who signed it.
A firm that needs the first should buy the first. We would rather say that than sell the second to somebody who assumed it was the same thing.
On a dedicated instance the code is on your server. The file that performs the licence check is readable, and it names exactly what goes out: an instance id, a version, the firm name and a brand colour.
That is the standard this page is written to. Every claim above is either something you can read in the code you are running or something stated as a contractual promise rather than a technical one.
Tenancy, what leaves an instance, and what the AI providers see. A firm of 20: you and nineteen AI employees. See the whole firm and join the waitlist.