This page exists so a security review can be completed without a call. If something here is not specific enough for your assessment, say so and we will add it rather than answer it by email.
1What stays inside
- Your HANA database. NeelAI connects read-only and never writes to it.
- Your database credentials, encrypted at rest on the NeelAI host.
- Full query result sets. The complete result is assembled on the NeelAI host and sent to your browser directly.
2What is sent to the model provider
- The text of your question.
- Database schema — table and column names and types. Not their contents.
- A bounded sample of result rows, used to write the summary and choose the chart.
That third item is the one that matters for your assessment, and it is the one we will not understate: for a question about named customers, those names are in the sample that gets sent.
3Deployment options that change this
| Option | Effect |
|---|---|
| Zero-retention agreement | Removes provider-side retention of request and response content entirely. |
| Aggregate-only mode | Sends grouped totals rather than row-level detail for summarisation. |
| Self-hosted model | Nothing leaves your network. Slower and needs GPU capacity; available per tenant. |
4Data residency
Processing location depends on the configured provider and is not guaranteed to be in India on the managed options. If in-country processing is a hard requirement, the self-hosted model tier is the configuration that meets it. Ask us for the current provider and region in writing — we will put it in the contract.