Enterprise-Grade Security
Automated PII/NHI/secret detection, ACL-aware retrieval, immutable audit logs, and zero-trust AI — all on-premise.
Security at
every layer
CordonData is designed with the assumption that no single security control is sufficient. Each layer independently prevents a class of threat — so a failure in one layer doesn't compromise the whole system.
SSO via Keycloak — no local passwords, no shared credentials
Source-of-truth permissions synced continuously from your systems
PII, NHI, and secret patterns scanned automatically on ingest
Immutable audit trail — required for GDPR, HIPAA, and internal reviews
What CordonData scans for
Three independent scanning layers detect sensitive content before it enters the AI pipeline — and flag it for remediation.
Permanently remove sensitive content from the document and purge it from the AI index. Irreversible. Audit logged.
Acknowledge a finding as intentional or acceptable. Removes the compliance block so the document re-enters the AI pipeline.
Trigger a fresh scan with the latest detection rules. Automatically runs when the scanner taxonomy is updated.
Enterprise-Ready, by Design
Built from the ground up for the security, compliance, and scale requirements of the world's most demanding organizations.
Zero external API calls
At rest & in transit
Single-node to multi-AZ
AD, LDAP, OIDC, SAML
On-Premise
Deploy entirely within your data center. Air-gapped operation with no external dependencies. Full control over infrastructure, networking, and data residency.
- Bare metal or VM deployment
- Docker Compose or Kubernetes
- Local LLM inference via Ollama
BYOC (Bring Your Own Cloud)
Deploy inside your own AWS, Azure, or GCP environment. You maintain control of the infrastructure while we provide the software and support.
- Your VPC, your security groups
- Your IAM roles and policies
- Your encryption keys (BYOK)
Managed Single-Tenant
Let us host it for you — in a dedicated, physically isolated environment. No shared databases, no shared indexes, no cross-tenant data leakage.
- Dedicated infrastructure per customer
- 99.9% uptime SLA
- Managed updates & monitoring
Automated PII, NHI & Secret Detection
Before any document enters your AI pipeline, CordonData scans, classifies, and redacts sensitive data — ensuring compliance with GDPR, HIPAA, PCI-DSS, and internal data governance policies.
PII Detection
Automatically identify and classify Personally Identifiable Information across all ingested documents — names, addresses, phone numbers, email addresses, social security numbers, passport numbers, driver's license IDs, and more.
NHI Detection
Detect Non-public Health Information and protected health data — medical record numbers, health insurance IDs, patient identifiers, diagnosis codes, and clinical trial data — ensuring HIPAA compliance.
Secret & Credential Detection
Scan for leaked API keys, access tokens, database connection strings, private keys, AWS/Azure/GCP credentials, and other secrets accidentally embedded in documents before they reach the AI model.
How Compliance Scanning Works
Document enters the pipeline from any connected source
Regex + ML models detect PII, NHI, and secrets with confidence scoring
Auto-redact sensitive spans or flag for manual review based on policy
Only sanitized content enters the vector index and LLM context window
Enterprise-Grade Transparency
We built CordonData to solve the two biggest blockers for Enterprise AI adoption: Data Security and Hallucinations.
Verifiable Retrieval Audit Trace
LLM hallucinations are unacceptable in the enterprise. CordonData provides a deterministic audit trace for every generated sentence. Instantly verify the exact document, page number, and extracted text chunk the AI used to formulate its response.
- Direct links to source files in your DMS
- Confidence scoring on vector matches
- Exact text chunk highlighting
Permission-Safe Retrieval Routing
A search engine is only as safe as its weakest access control. While Keycloak handles seamless identity authentication, CordonData’s native authorization engine takes over at the data layer. When a user queries the system, the vector space is dynamically filtered by cross-referencing their username, group, and authority directly against the indexed document metadata.
- Secure authentication via Keycloak/Active Directory
- Index-level authorization (User/Group matching)
- Impossible to bypass via prompt injection