iSearch
SV
Menu

Security

Your data stays with you. Access follows your organisation.

You own the data and choose how iSearch is used.

  • The whole chain with you

    No public AI services.

  • Own installation

    Separate for every customer.

  • With you or with us

    You choose where iSearch runs.

  • Own language model

    Runs in your own environment.

Where iSearch runs

In your environment or with us. On your premises, the whole chain can run, the language model included, with no public AI services.

  • Your documents, iSearch and your people in a row. A lock by iSearch shows that the whole chain can run in your own environment.

    Hosted by you

    The whole chain runs in your own environment, the language model included. Passwords and keys are stored in your installation, and you stay in full control of accounts and access.

  • A locked environment of your own with your documents and iSearch. A secure line runs out to your employees.

    Hosted by us

    We run iSearch for you in Sweden, in a dedicated environment for your organisation.

  1. 01

    Kept apart from others

    No shared document pool.

    • Each customer has its own knowledge.
  2. 02

    Your environment

    The whole chain can run on your premises.

    • On your premises, with us or as a hybrid.
    • No public AI services. No data leaves your environment unless you want it to.
    • Passwords and keys are stored in your own installation.
    • Can also run fully isolated (air-gapped) when required.

The right model for the job

We choose language models that fit your organisation and your requirements. The model can run in your own environment, along with the rest of the chain. Your data is never used to train models.

Who can access what

You choose who may use iSearch and what may leave the organisation. We set it up around your needs, and everything can be followed afterwards.

  1. 01

    Sign-in

    The same account as in your other systems.

    • SSO with your existing company account.
    • Two-step verification (MFA), with recovery codes.
    • Require SSO or MFA per organisation.
  2. 02

    Permissions

    The right person, the right access.

    • Role-based access control (RBAC): administrator, organisation administrator, auditor and member.
    • Four-eyes principle for sensitive changes: where iSearch runs, sign-in rules, roles, retention periods and removing users.
    • Recipients can ask, not change.
  3. 03

    Traceability

    See who did what.

    • Tamper-evident audit log.
    • Can be connected to your SIEM.
    • Every answer shows which documents were read.

How the data is protected

Your data belongs to you. It is encrypted, trains no models and can be deleted whenever you want.

  1. 01

    Encryption

    Protected at every step.

    • Encryption in transit (TLS), including between services (mTLS).
    • Encryption at rest for documents and content.
    • Encrypted, verified backups (AES-256).
  2. 02

    Clear ownership

    No training on your knowledge.

    • Your data belongs to you and is never used to improve the product for others.
    • Documents and chats train no models.
  3. 03

    Data protection and GDPR

    Support for what GDPR requires.

    • Export and deletion per user.
    • Retention periods per data type.
    • Legal hold during a dispute or investigation.
    • Questions to the assistant are not logged in plain text by default.
    • Assistants, documents and the account can be deleted whenever you want.
    • You are never locked in.

Software and updates

You know what is included and where it comes from.

  1. 01

    Software and updates

    You know what you run.

    • Locked dependencies.
    • SBOM: a list of all components.
    • Signed updates, including for fully isolated environments.

Agreements and responsibility

The customer owns the data. Responsibility follows where the environment runs.

When iSearch runs with you
You are the controller for accounts, documents and chats. iSearch delivers the software.
When we run it for you
We act as processor. A data processing agreement is signed before you start using iSearch.
Questions
hello@iSearch.app
Book a walkthrough

Read more in About AI

All articles

  1. AI for organisations with strict confidentiality needs

    Public authorities, law firms and insurers can use AI without giving up control. Own installation, air-gap, access control, traceability and sources.

  2. How to use open-source AI safely in your organisation

    Open-source AI gives you transparency, but responsibility for what you download is yours. On add-ons, packages, updates, model files and supply chain rules.

  3. When is an AI answer an official document?

    What Sweden's public access principle means when authorities use AI. Prompts, answers and logs as official documents, confidentiality and the ongoing inquiry.