Secure AI for business
Every major model, on one subscription, with your company’s identity stripped before a single request reaches a provider. Your people get the tool they were going to use anyway — and your client list stays yours.
From 5 seats. Invoicing on request.
Three steps, and the middle one is the whole product.
Names, emails, phone numbers, cards, addresses and IDs are found on the device and replaced with realistic stand-ins before anything is sent.
Your deviceThe provider is billed by us and sees a request from us. No account id, no company, no billing identity travels with the question.
What the provider seesThe stand-ins are swapped for the real values in the reply, on your device. The answer reads as if nothing happened, because to you nothing did.
Your deviceRequests reach the model through us, with no account, no company name and no billing identity attached. What the provider sees is a question from nobody in particular.
Not to our servers. We hold the ciphertext and no way to read it, which is a smaller promise than a policy and a much harder one to break.
Your team does not need four vendor accounts, four invoices and four sets of data terms to reach the frontier models.
Invite people one at a time. When somebody leaves, reclaim the seat — the licence belongs to the company, not to the address that accepted it.
Who is on the team, and what each seat is actually using. Enough to plan a renewal without asking around.
Not your conversations, not your documents, not the things people paste in at 6pm because it was faster than reading the policy.
The people already using AI at work, carefully, and wishing they did not have to be so careful.
Draft, summarise and review client work without the client's name, matter number or figures reaching a model vendor.
The work around care rather than the record itself — scheduling messages, insurance and billing letters, policy questions, patient-facing material. Therapists and clinicians included. Records stay in the system that holds them.
Candidate notes, performance drafts and difficult letters, none of it filed under a person's name in somebody else's account.
One subscription across every client, with no vendor building a picture of who you work for from your questions.
Models, forecasts and board material, without a spreadsheet of account numbers becoming training data.
The thing your staff are already pasting into a chatbot at 6pm, on a tool that does not keep it under their name.
The right-hand column is how account-based AI works generally, not a claim about one company. Two of these rows we lose, and they are in the table for the same reason the others are.
| Question | Secure AI | A typical AI vendor |
|---|---|---|
| Does the AI provider know which company is asking? | No — identity is stripped before the request leaves | Yes, the account is the customer record |
| Who can read a conversation later? | Your devices. We hold ciphertext | The vendor, for support and abuse review |
| Is our data used for training? | No, on every plan | Usually off on business tiers — worth checking yearly |
| How many vendor contracts for frontier models? | One | One per provider |
| Can we reclaim a seat when someone leaves? | Yes, per person | Usually yes |
| SAML / SSO? | Not yet — talk to us about your timeline | Generally yes on enterprise tiers |
Advanced models for the whole company, on one bill.
$20per seat / month
The most capable models, the highest limits, for everyone.
$90per seat / month
5–500 seats self-serve. Above that, or if you need invoicing, talk to us.
The words of the question, with identifying values already replaced. They cannot see which company sent it, which person sent it, or what the real values were — those never leave your device.
Conversations are encrypted to your devices, so we hold ciphertext. We do see billing details, because somebody has to take the payment, and we see the volume of requests a seat makes.
Reclaim the seat from the team screen. Invitations are per person, so a leaver's access ends with their seat rather than with a shared code nobody can rotate.
Ask us where we are with both rather than trusting a badge on a marketing page. We would rather tell you the honest state of it on a call than imply something that is not finished.
No — we are not set up as a business associate and do not sign BAAs, so regulated health records should not go through it. Plenty of clinical practices use it for the work around care: scheduling, billing letters, policy questions and patient-facing material. If your compliance team needs a BAA, tell us and we will say honestly where we are rather than sell you a maybe.
Yes, on request, and above 500 seats it is the normal route. Below that, card checkout is self-serve and takes about a minute.
It can. Patterns catch what has a recognisable shape, and an unusual identifier described an unusual way can pass through. That is why it is one layer of several rather than the only one.
Start with five seats on a card, or write to us and we will answer the awkward questions first.