Security
Architecture you can put in a questionnaire.
Tokamak is built for firms that will not send proposal text to a random API. Embeddings run in-process. A configuration exists in which no third party sees document text.
Tenant isolation
Tenancy is an explicit parameter throughout the stack, with an index-per-tenant boundary in search. One customer’s corpus is not another’s retrieval pool.
Local embeddings
Document embeddings run in-process on the application host. There is no required call to a hosted embedding API for indexing.
Zero-egress configuration
Deployments can be configured so generation and checking use models that stay on your infrastructure. Document text need not leave the environment. Air-gapped appliance deployments are a first-class option — see pricing.
Encryption and audit
Traffic is encrypted in transit. Data at rest follows the storage you provide (cloud volume encryption or your own disk policy). Overrides of export gates record who overrode what, when, and which reasons were overridden. Nothing is silently deleted.
What we do not claim
No compliance certifications are currently held. A security questionnaire will be answered directly. Ask for the architecture detail you need rather than a logo wall.
Send the questionnaire
We answer security questionnaires directly — with architecture detail, not a logo wall.