01
Data stays where you approve
Production document processing runs on-premise, in a private or sovereign cloud, or fully air-gapped. Models, keys, prompts, responses and audit records remain under your control per the contracted design.
Trust and security
Your documents stay inside your approved boundary
iDocHive is built for organizations that cannot send production documents to public AI services. The security boundary is chosen before anything is deployed.
Security boundary
On-premise
Private cloud
Air-gapped
Data control
Infrastructure
Permissions
Audit
What we commit to
What we commit to
These are design commitments carried into every deployment and written into the architecture document for your environment.
02
No public AI API required
Sovereign and air-gapped deployments use customer-approved local models. Cloud models are used only where your own policy allows it, and the AI Gateway enforces which models may be reached.
03
Permission-aware retrieval
Role-based access, least privilege and collection- or record-level restrictions. Unauthorized collections never enter the answer context.
04
Full audit trail
Ingestion, access, inference, approval, export and administrative events can be recorded and streamed to your SIEM by syslog, API or an approved agent.
05
Your encryption keys
Encryption in transit and at rest is baseline. Customer-controlled keys are supported where policy requires. Key custody is agreed in the architecture review.
06
No training on your content
Customer content is not used for model training without explicit authorization. An approved-model registry tracks versions and prompt policy.
Certifications and compliance posture
ISO
Certifications and compliance posture
Creation Next, the company behind iDocHive, holds ISO 9001 and is ISO 27001 certified. Certification covers our information security management system; it does not by itself make your deployment compliant. Jurisdiction-specific mapping — for example Saudi PDPL and NCA ECC, DCC and CCC where cloud infrastructure applies — is done per tender and topology. Certificate details and scope are available on request.
AIR-GAP
Isolated environments
Air-gapped designs use internal inference, approved model packages and signed offline update packages for the application, OCR and models, with checksums, provenance and rollback. Transfers follow your media-transfer approval. No production internet egress is part of that topology.
Please do not send confidential documents through the forms on this website. Share the use case, boundary, document profile and success measures instead.
Your documents stay inside your approved boundary
iDocHive is built for organizations that cannot send production documents to public AI services. The security boundary is chosen before anything is deployed.