Enterprise-grade security at every layer
Your data stays yours: isolated from every other firm and encrypted everywhere. Every answer traces to its source.
Request DemoNo training on your data
Your data never trains models other firms use.
Strict data isolation and boundary enforcement
Every query is scoped to your firm, isolation is enforced at the identity layer, and your search index sits in its own namespace.
Least-privilege access and controlled permissions
Every user, process, and service operates with only the access required. Permissions are scoped, logged, and reviewable.
Full auditability of system behavior
Every query, calculation, and data access is logged with complete lineage. Trace any output back to its source.
Deterministic and reproducible outputs
Every number is computed by code, so the same inputs give the same figures, and any result can be reproduced on demand.
Designed to withstand scrutiny
Built for regulated environments where auditors, compliance teams, and regulators require full transparency.
How your data
is protected
Three layers sit between your data and anyone who shouldn't see it.
Isolated per firm
Every query is scoped to your firm, and your search index sits in its own namespace.
Encrypted everywhere
AES-256 at rest with keys held in a managed key service and rotated; TLS 1.2 or higher in transit.
No way in from outside
Agents run on a private network with no public ingress. Nothing outside can call them.
Single sign-on, enforced
SAML and OIDC through your identity provider, with multi-factor authentication.
Zero-trust operator access
Engineers reach production only through SSO-gated, logged sessions on a private network. No SSH.
Full audit trail
Every production action and every model call is logged, and any conversation can be replayed step by step.
Threat detection
Continuous threat detection, a web application firewall and DDoS protection in front of every request.
Independent penetration testing
Third-party penetration tests of the app and API every year, including attempts to cross between firms.
Continuous vulnerability scanning
Code, dependencies and infrastructure scanned continuously, with findings tracked to resolution.
Compliant with
industry standards
Reports can be found on the Kepler Trust Portal.
Visit the Trust Portal
AuditedSOC 2 Type IISecurity controls, audited over time
CompliantGDPRPersonal data of people in the EU
CompliantCCPAPersonal data of California residents
In progressISO 27001Information security management system