Security & on-prem
Client confidentiality comes first. Run ContractReviewDesk where your documents already live.
| Encryption at rest | AES-256-GCM per file, key per workspace (HKDF from a master key you hold) |
| Tenant isolation | Every row carries a workspace id; every query filters on it |
| Audit log | Append-only, SHA-256 hash chain; one click shows if any entry was edited or deleted |
| Access | Roles: owner, admin, lawyer, viewer (client); SSO via OIDC; SSO enforcement per domain |
| AI data | Local model on our Bengaluru GPU server or yours; Claude fallback can be switched off (air-gapped mode) |
| Deployment | Our cloud (India), your private cloud, or fully on-prem with Docker Compose |
| Hallucination control | Citation verifier on every AI answer; verbatim-quote check on every extracted answer |