Trust and security · Where Asiri runs

Every step you take towards owning it is a step we stop being able to help.

Four ways to run Asiri, ordered by how much of the stack you own. Each one lists what you gain and — in the same size type — what we can no longer do for you afterwards. Nobody sells the fourth option honestly, so here it is.

Talk about deployment How we hold data

WE RUN IT
Shared
af-south-1, Cape Town · our account
Free, Starter and Growth
What you gain
Row-level isolation in a shared database. Every query is scoped by workspace, and the scoping is tested rather than assumed.
What we can no longer do
A shared database is a shared blast radius. If a query in another tenant is written wrongly, the isolation is what stops it — not a separate machine.
WE RUN IT
Dedicated database
af-south-1, Cape Town · our account
Enterprise
What you gain
A cluster provisioned for you alone. No other customer’s rows sit beside yours, so a scoping mistake elsewhere cannot reach you.
What we can no longer do
Application servers and Eri are still shared. Isolation is at the data layer, not the process layer, and anyone claiming otherwise is overselling it.
YOU RUN IT
Your own cloud
Your AWS account, any region you choose
Enterprise, priced separately
What you gain
The database, the evidence files and the audit trail live in infrastructure you own and can audit directly. Your security team holds the keys and can revoke our access without asking us.
What we can no longer do
We can no longer restore your data — backups are yours to take and to test. Upgrades run on your maintenance window, so a fix can wait weeks. And an outage in your account is an outage we cannot fix.
YOU RUN IT
Self-hosted
Your own data centre or private cloud
Enterprise, priced separately
What you gain
Nothing leaves your network. Asiri ships a release you deploy, and there is no connection to us at all unless you open one.
What we can no longer do
Eri is off unless you open an egress path or run a model yourself — the assistant cannot answer from registers it cannot read. You operate the upgrades, the monitoring and the recovery. Our response commitment covers the software, not your deployment of it.

The four questions that actually decide it

Who restores your data at three in the morning

Not who holds the keys, which is the question procurement asks. The one that matters is who is awake, accountable and able to act when something has gone wrong — and past the second rung, that stops being us.

Question	Shared	Dedicated	Your cloud	Self-hosted
Who restores after a failure	We do, and we hold the backups	We do, and we hold the backups	You do — we hold no copy	You do — we cannot reach it
Who holds the keys	We do	We do	You do	You do
Who decides the upgrade window	We do — you get fixes same day	We do — same day	You do — a fix can wait weeks	You do
Who can revoke our access	Us, on request	Us, on request	You, unilaterally	You — we have none

Scroll the table sideways on a narrow screen

af-south-1 · Cape Town

Calling us does not create a transfer you have to register

For a product whose entire subject is cross-border discipline, running in Ireland and asking you not to think about it would be indefensible. Every request is served from af-south-1 and every record stays in it — on the first two rungs, without you having to do anything about it.

Choose the third rung and residency becomes yours to decide, which is a gain and a responsibility in the same sentence.

What leaves the region, on any rung

Your registers and evidence: They stay in the region you are deployed in, on every rung, without exception.
The control plane: On your own cloud, we see licence state and version — never records. Enough to bill you, not enough to read you.
Anything used to train a model: Not aggregated, not anonymised, not to improve the service. Your compliance record is not our training set.
Support access: Reason-bound, expiring, and logged on your own audit trail under our name — which is how you find out, rather than from us.

Most companies who ask for the fourth rung want the second

What they actually need is isolation and control over their own keys, not an operational burden their team will carry for years. We will tell you that in the meeting rather than after the contract.

Talk to us See pricing