Trust and security

The answers procurement asks for

Enterprise AI does not stall on capability. It stalls on the questions below, and they are easier to answer before a project starts than during a security review.

Data residency

UK or EU by default. Named per engagement in the DPA.

Sub-processors

Listed per engagement, with notice before any change.

Model providers

Named per engagement, with data-retention terms stated.

Retention

Defined per engagement, with deletion on request.

Access

Least privilege, time-bound, revocable, logged.