Security
Security and compliance, with the details written down.
Built for organisations that cannot afford to get AI wrong — banks, hospitals, manufacturers holding customer data, government departments. Below: our certificates with their numbers, where your data runs, who can see what, and what is still in progress.
Certified for information security and AI management
ISO/IEC 27001:2022
Information security management system
ISO/IEC 42001:2023
Artificial intelligence management system
Runs where you choose
Your servers
Installed in your own data centre. You control the hardware, the network and who has access.
Your cloud account
Deployed in your own cloud account, with your provider, under your contract and your access policies.
NeoPhoenix servers
Enterprise is a single-tenant instance for one customer; SaaS is the shared platform. NeoPhoenix runs and maintains both.
Same product, same rules, your choice.
Stays on the infrastructure you choose
- Your documents
- Your embeddings and index
- Your questions and answers
- Your access rules and logs
On every option, sensitive data is masked and encrypted before any AI model sees it. On your servers, your cloud account or an Enterprise instance, there is no call to any public AI provider.
Who sees what, and a record of all of it
Access is decided before retrieval
Role-based and field-level access, with sensitive fields masked, applied before the AI retrieves anything.
An immutable audit log
Every query, every retrieved passage and every answer is logged, and the log exports for your internal audit or for a regulator.
Rules, not judgement
Retention, residency, disclosure and sector rules (DPDP, RBI, SEBI, IRDAI, as applicable) are written as policy and enforced by a rule engine. The AI does not decide what is permitted; it works inside what is permitted.
What is not done yet
Each item stays on this list until it is done. We update this page when it is; nothing is listed as done before then.
- SOC attestationIn progress
- CERT-In empanelled VAPT reportPlanned
- Formal software bill of materials (SBOM)Planned
Ask us the hard questions on the briefing call.
Book a 30-minute briefingSecurity questionnaire? Send it to hello@neophoenix.ai