Security & Deployment
Your data never touches our servers.
CIMs, QoE reports, and data room files contain the most sensitive information in private equity. Caelon deploys on your infrastructure — not ours — so none of it ever leaves your control.
Security by architecture, not by policy.
- Deployed on your infrastructure. Caelon runs on your AWS, Azure, or GCP account — inside your VPC, governed by your security policies. We deploy using infrastructure-as-code. You own every server, every database, every encryption key.
- Zero data retention. Documents are processed within your environment. Findings, tasks, and deal data are stored in your databases. Nothing transits through Caelon servers. We cannot see your data — by design, not by policy.
- Model-agnostic AI. Connect to Claude via Bedrock, GPT via Azure OpenAI, or any model endpoint you control. AI inference happens within your infrastructure. Swap providers without touching workflows.
- Full audit trail. Every document upload, finding extraction, task creation, and status change is logged with timestamp, user, and source. Export audit logs on demand. Board-ready compliance from day one.
On-premise vs. managed SaaS.
| Caelon | Cloud SaaS | |
|---|---|---|
| Document storage | Your infrastructure | Vendor servers |
| AI processing | Your infrastructure | Vendor API |
| Encryption keys | You own them | Vendor manages |
| Data access | Your team only | Vendor has access |
| Air-gapped option | Available | Not possible |
| Vendor goes down | System keeps running | You lose access |
Questions your security team will ask.
Can Caelon employees access our deal data?
No. The system runs on your infrastructure. We have no standing access to your environment. Maintenance access is granted by you, scoped to specific tasks, and fully logged.
What if Caelon goes out of business?
Your system keeps running. The application is deployed on your infrastructure — it doesn’t depend on our servers. Source code escrow is available for enterprise agreements.
Is our data used to train AI models?
Never. AI inference runs within your infrastructure. Your documents are processed by the model endpoint you choose. Nothing is sent to Caelon or used for training.
Can we run it fully air-gapped?
Yes. For firms with strict network isolation, Caelon runs fully air-gapped with local AI models. No external API calls required.
How do we verify your security claims?
Run your own penetration test. We provide SOC 2 reports and support third-party security audits. We encourage verification over trust.
Who handles disaster recovery?
Your infrastructure, your DR strategy. We provide documented backup and recovery procedures tailored to your deployment topology.
See how deployment works for your team.
We walk through your infrastructure requirements, show a live deployment, and answer every question your security team has.