Security
We've spent decades building infrastructure and security software, so we'd rather show you how things work than ask you to take our word for it. Here's what's in the products today, and what isn't yet.
Isolation between organisations
Every query is scoped to the caller's organisation. Vox also enforces this with database row-level security, so a query that forgets the filter still sees nothing it shouldn't. Automated tests check that isolation holds.
Least-privilege roles
Members, admins and operators each see only what their role needs. Lore's operator role has no access to organisation content, by design.
Offline, signed licences
Licence keys are Ed25519-signed and verified locally. Nothing calls home, and a lapsed subscription never disables a running system.
Data that stays put
In its Sovereign edition, Lore runs with no outbound connection at all: the language model runs on the appliance itself. Files are stored under server-generated names, never user-supplied paths.
PHI mode
In Vox, healthcare businesses' calls are routed only through services approved for health data, with patient details removed from logs and kept out of URLs.
Redacted, structured logs
Secrets and tokens are stripped from logs at every level, and metrics flow to standard tools like Prometheus and Grafana.
Tamper-evident usage records
Vox's call ledger is append-only: corrections are added, never edited, and records are archived to write-once storage.
Security audit log
Vox records every change, sign-in, refused request and transcript view with the actor, time and source. Entries are hash-chained and archived to write-once storage, so they can't be quietly altered.
Privacy mode
Lore can replace email addresses, phone numbers and other identifiers with placeholders before the language model sees them, including in page images. Detection runs on the appliance.
Read-only storage connections
When an organisation connects its own storage to Lore, access is limited to listing and reading one folder. Credentials are encrypted, and the admin's consent to a plain statement of what is allowed is recorded.
Private chat history
Lore saves each person's conversations for them alone. No admin view reads them, and each organisation sets how long they are kept.
Source you can read
Lore and Vox are licensed under the Business Source Licence, and customers can review the code before trusting it.
What we don't have yet
We're an early-stage company and we don't hold SOC 2 or HIPAA certifications yet. We'll tell you exactly how the products handle your data, answer your security questionnaire honestly, and sign an NDA before any technical deep dive.
Found a security issue? Email hello@neuairalabs.com with the subject "Security report". We take every report seriously and will reply directly.