Security & trust

Your prompts never have to leave your building.

Yaazh is built for teams whose AI usage is itself sensitive data. Deploy fully on-prem or in your VPC in Indian regions, with audit logs, RBAC and zero training on your data.

Deployment models

Run it where your compliance team sleeps best.

On-prem

The full platform — gateway, workers, database and dashboards — inside your own data centre. A documented reference deployment, DPDP checklist included.

VPC

Your cloud account, Indian regions, your keys. Yaazh runs inside your network boundary; nothing transits infrastructure you don't control.

Cloud

Managed Yaazh for teams that want speed first. Data encrypted in transit and at rest, hosted in Indian regions.

Data flow

What leaves. What never does.

In on-prem and VPC deployments, prompts and completions never leave your boundary. What Yaazh needs to function is metadata — token counts, model names, latencies, cost figures and work-item references.

Never leaves your boundary

  • Prompts and completions
  • Provider API keys (encrypted vault)
  • Your source code and documents
  • PII in requests (masked at the proxy)

Metadata Yaazh uses

  • Token counts and cost figures
  • Model and provider names
  • Ticket and sprint references
  • Audit events and guardrail triggers

DPDP posture

Built for the DPDP era, ahead of the deadline.

India's DPDP compliance deadline is May 2027. Yaazh ships data-residency options, retention controls, right-to-erasure workflows and exportable audit trails — so your AI stack is ready before the law requires it.

Data residency

Indian-region hosting in every deployment model, including fully on-prem.

Audit trail

Every call, key access and guardrail trigger logged, attributed and exportable.

No training on your data

Your prompts, completions and telemetry are never used to train models. Contractual, not configurable.

Practices

Credentials, access and audit.

Provider master keys live in an encrypted vault and never reach the browser. Users hold personal, revocable virtual keys. RBAC scopes every dashboard and every export. Audit logs are append-only.

Send this page to your CISO.

One update a month until launch. No spam.