Security and trust

How Kai is built

• Local-first: Kai learns, stores and thinks inside the customer's company, encrypted, on its own cloud or a Kai Box.

• The customer controls its data. Xamar receives only a box ID, a version number and a licence check.

• Support only in a session the customer opens, and every session is logged.

• Risky actions wait for a person's approval, and every action is on record.

• Instructions hidden in emails, documents or code are treated as untrusted.

This website

Everything travels encrypted, and is encrypted where it is stored. The forms write to a database that only our servers can read, and our admin area sits behind its own sign-in.

Certifications

We hold no security certifications today. Kai is built to meet the UK GDPR, the EU GDPR and the EU AI Act. When we start a certification, it will be listed here as in progress, and only called complete once it is.

Reporting a security issue

Write to privacy@xamar.ai. We will acknowledge it quickly and keep you updated.