# Security and control: what stays on your machines, and how you check it Security: hardware you control ยท DataBridge by Walnut What stays on your machines, who sees what, what AI may do, what is recorded and how you leave with everything. DataBridge is installed on hardware you control, and each person sees only what their role allows. This page sets out what stays where, what AI may do, what is recorded and how you leave with everything. It starts with a demo on a sample of your own documents and data. ## For your security review ### Deployment Installed on hardware you control. ### Where your data lives On your machines. In the on-premise setup nothing is uploaded and nothing connects out. ### What can leave, and who approves it In the on-premise setup, nothing leaves unless a person approves it: drafted emails go out only after approval. Facts an AI suggests wait for a person to confirm them. ### Confidential material Kept in a separate store with a key of its own. ### Suppliers behind this website Listed on the sub-processors page. [Sub-processors](https://walnut.sg/legal/sub-processors/) ### Security contact Write to outreach@walnut.sg. The contact is also published at /.well-known/security.txt. [Report a vulnerability](https://walnut.sg/security/disclosure/) Your IT, privacy and vendor-risk reviewers receive the full architecture sheet before anything is installed. ## [What is installed on your machines](https://walnut.sg/security/#deploy-head) The shaded box holds your data. Your sources feed it, the AI model you choose proposes, and the people who approve decide. Step through the six controls, from where it runs to how you leave with everything. ## [Your data stays inside your walls](https://walnut.sg/security/#walls-head) ### Where it runs Runs on your machines: installed on your own premises, nothing is uploaded and nothing connects out. Your choice of model: use the AI model you prefer, or use none. ### Who sees and decides Access by role: each person sees only what their role allows. A person confirms what AI proposes: drafted emails go out only after approval. ### What you keep Every version is kept: corrections add a new version and keep the old one. Leave with everything: export the whole record in standard formats. ## [Connections out of your network](https://walnut.sg/security/#network-head) When it is installed on your own premises, nothing is uploaded and nothing connects out. ## [Each control in more detail](https://walnut.sg/security/#detail-head) ### [Who sees what](https://walnut.sg/security/#access) Each person sees only what their role allows. Your administrators set the roles once, and access follows each person's role from then on. ### [Confidential material in a separate store](https://walnut.sg/security/#confidential) Confidential material is kept separately, locked with its own key. ### [A person approves what AI proposes](https://walnut.sg/security/#approve) A fact the AI suggests waits until a person confirms it, and a drafted email goes out only after approval. Each confirmation is recorded with its date. ### [Every version is kept](https://walnut.sg/security/#versions) A correction adds a new version and keeps the old one. You can read what the record said on any past date. ### [What is recorded](https://walnut.sg/security/#log) Each use of AI is recorded, and recorded values are never overwritten. ### [Leaving with everything](https://walnut.sg/security/#exit) Export the whole record in standard formats, and we restore it into a fresh system in front of you, so you can see nothing was lost. ## [What your reviewers receive](https://walnut.sg/security/#sheet-head) Your reviewers receive the full architecture sheet before anything is installed. The disclosure policy and the model use statement are on this site. - [The disclosure policy](https://walnut.sg/security/disclosure/) - [The model use statement](https://walnut.sg/product/technical/#statement) - [Technical overview](https://walnut.sg/product/technical/) ## [Installing and running DataBridge](https://walnut.sg/security/#installation-head) We set DataBridge up on your machines and connect it to your sources during the pilot. ## [How this website itself is run](https://walnut.sg/security/#this-site-head) The contact form sends your message as one email to one inbox, and that inbox is where it is kept. How this website itself is run is set out in the [Technical overview](https://walnut.sg/product/technical/#this-site). It starts with a demo on a sample of your own documents and data.