Built to pass your security review.
The first question every enterprise asks is “where does our data go?” The answer is: nowhere. ThirdEye runs as a single instance inside your environment, on your model endpoints, under your keys and your controls.
Now deploying with a European tier-1 telecom operator — inside their own cloud, EU region, through full enterprise security review.
Data residency
Your instance runs in the cloud region you choose — EU regions are the worked example, any supported region works. Documents, prompts, embeddings and logs all live and stay there. Nothing is processed outside your environment.
Deployment models
A single instance inside your own cloud account (AWS or GCP), deployed and operated for you. For the strictest environments, a fully air-gapped deployment with local open-weight models is available — no external calls at all.
Your model endpoints
Prompts and data go to model endpoints in your own cloud project — Google Vertex or AWS Bedrock. We never call public model provider APIs. The model serving path inherits the same residency and access controls as the rest of your stack.
Encryption
Customer-managed encryption keys across the deployment: node disks, data volumes, container registries and secrets. You hold the keys; revoking them revokes access.
No-egress architecture
Outbound traffic is restricted to an explicit whitelist of approved sources — or to nothing. Databases, search indexes, caches and object storage all run inside the deployment, so no third-party data processor ever touches your content.
Governance
A query-level audit trail of who asked what and which sources answered. Role-based access scopes which document sets each user can query. Usage and token monitoring give administrators cost and adoption visibility from day one.
Staged compliance
Dev, test and prod are separate environments, so pilots can start while production security review runs in parallel. We work inside your security and cloud-governance processes — intake forms, architecture reviews, registry and IAM constraints — rather than around them.
Talk to us about your security review
Bring your security questionnaire, architecture review or cloud-governance intake — we are working through them at tier-1 scale right now. Start the conversation.