Security and privacy
Security: where your documents live and who can reach them
What you need to know before uploading a contract: where it stays, what separates your space from another company's, what gets checked before an answer, and what we do not promise.
The short answer
Your files stay in your company's space, which is not mixed with anyone else's. Bentho answers only from what is there and shows which document it used. What it processes with them stays there too: using an external provider is an option enabled per customer.
Updated on
Where your data lives
There are two ways to use Bentho, and the difference is who provides the server: managed cloud or your own server.
| The question | Managed cloud | Own server |
|---|---|---|
| Who provides the server? | Bentho | Your company |
| Where do the files stay? | In your company's space | In your company's space |
| Where does the compute run? | On our engine | On your server |
| Does anything go to an external provider? | No. It is an option enabled per customer | No |
What separates one customer from another
Your space is only your company's. What you upload is not mixed with anyone else's and is not used to answer someone else. Underneath, that rule is enforced on every call:
Every call identifies itself
Between the system's entry point and its services travel a credential, the customer's identity and a signature over the whole message.
Every service checks
The customer in the signed identity must match the one in the request. If it does not, the call is rejected.
Replays do not pass
There is an anti-replay window: an old call is not accepted.
If something is missing, it is rejected
The design is fail-closed: if a check cannot be made, the call does not pass.
What gets checked before an answer
Only your documents
It answers from what is in them and shows which one it used. What it cannot find, it does not invent.
Validated input
What comes in is checked with types before anything is touched.
Figures with backing
A figure with no backing in the final message is discarded and a template answers.
People on the path
Handoffs and disputes stop until a person approves them.
What this page does not claim
A security page is worth what it does not overstate. Today we do not publish security certifications, retention periods or hosting regions. If your procurement process needs them, ask us.
- To report a security problem, write to the contact inbox with the subject «Security».
- To review how your case fits before buying, request an audit.
Related
Frequently asked questions
Are my documents mixed with another company's?
No. Each company has its own space, and what you upload is not used to answer another. Every service checks which customer each call belongs to.
Do my documents leave my space?
No, neither the files nor what the RAG processes with them. Using an external provider is an option enabled per customer. On your own server, the compute runs on your server.
What if the answer is not in my documents?
Bentho says so. It does not fill in the answer with what it assumes.
Can I install Bentho on my own server?
Yes. It is one of the two options published on the plans page, and it is sold by proposal.
Does Bentho have security certifications?
We do not publish any at the moment. If your procurement process requires a specific one, ask us before you buy.
Does your security team have questions?
Send us the list you use to assess vendors. We will tell you what we can answer today and what we cannot.