Skip to content

Security

Security, taken Seriously!

Transparency is always an appreciated but less-seen virtue. NeelAI was made with security in mind. We don’t want to be that company that just sells you software. We want to build your Trust in the volatile AI landscape. That’s why we place ‘Security’ at the core of NeelAI. Our architecture is transparent for your IT team’s perusal.

00 Where it sits, and what crosses
YOUR NETWORK OUTSIDE Browser who owes us the most? NeelAI on the server · nothing stored Your SAP Business One OINV · OCRD · OITM · OITW 1,873 rows · 13 tables read-only login Language model SELECT "CardName", SUM("DocTotal") FROM OINV 1 · your question 6 · the answer 2 · the question, table + column names 3 · a query, as text 4 · SELECT 5 · your rows never leave this panel CROSSES text only — steps 2 and 3 NEVER CROSSES any row of your data your database login
Fig. 1   Steps 2 and 3 are the only ones that cross the boundary, and both carry text — a question going out, a query coming back. Step 5, the one carrying your actual data, begins and ends inside your own network.

Never leaves your network

  • The SAP Business One database itself. The connection is read-only and there is no write path.
  • Your database credentials, encrypted at rest on your own deployment.
  • The full result of every query. The complete set is assembled on your host and goes straight to the browser of the person who asked.

Goes to the language model

  • The words of the question, as typed.
  • Table and column names and their types. Not what is in them.
  • A bounded sample of the rows that came back, used to write the summary and pick the chart.

A Note on Security!

As we said, Trust. No fine print here; a hard fact about how NeelAI works. That third item is the one your reviewer is going to stop at, and we are not going to soften it: ask a question about named customers and those names are in the sample that goes out. If that is a problem where you work — and for plenty of our customers it is — one of the three below is the configuration you need, and it is better to find that out now than during the security review three weeks before go-live.

Zero-retention agreement

Removes provider-side retention of request and response content altogether. Available on the managed deployment, and we will put the agreement in front of you.

Aggregate-only mode

Sends grouped totals instead of row-level detail for the summary. The answers get narrower. The exposure gets a great deal narrower.

Self-hosted model

Nothing leaves your network at all, ever. It is slower and it wants GPU capacity, and it is the only configuration that satisfies a hard in-country requirement.

On the managed options the processing location follows whichever provider is configured and is not guaranteed to be in India. If in-country processing is contractual for you, the self-hosted tier is the one that meets it — and either way we will name the provider and the region in writing before you sign anything.

Access and retention

Who can see what

Three roles, plus a per-dashboard and per-feature grant list on every user. Taking someone off the system deactivates them rather than deleting them, so what they asked and when stays attached to the audit trail.

What is kept

Encrypted credentials until they change, the schema snapshot until it is refreshed, and conversation history and activity logs for a window you set. People can delete their own history whenever they like.

Read the full detail in the docs

Need Further Clarity?

If your team seeks further clarity on NeelAI’s security, we can arrange for a call and discuss it live.

Book a demo Try it on a demo database it runs entirely in your browser — nothing reaches us