Private AI
Protecting Sensitive Data When Using AI
An AI system is a new set of paths in and out of your information. Most of the work of protecting data around one is not novel: it is knowing which paths exist and putting a control on each. What is novel is that several...
AI Identity and Access Management
The governing principle is one sentence, and almost every failure in this area is a departure from it. An AI system must not become a way around the authorization model an organization already has.
That sounds obvious. ...
Securing Enterprise AI APIs
An AI environment is a set of APIs. The model is reached over one, the retrieval service exposes another, the connectors consume half a dozen more, and anything the system can act on is reached the same way.
Which means...
AI Logging, Monitoring and Auditing
Every argument for logging an AI system is an argument for collecting the most sensitive material in the organization into one searchable place. Both halves of that sentence are true, and a design that takes only the fir...
AI Data Residency and Data Sovereignty
Data residency is a question about geography: where information is stored and processed. Data sovereignty is a question about jurisdiction: whose laws reach it, and who can compel its disclosure. They are related, they a...
Securing AI Agents in the Enterprise
An agent is an AI system permitted to act rather than only to answer. It can send the mail, update the record, open the ticket, move the file. Everything else about it is a variation on that one change, and that one chan...
AI Model Hosting Options for Enterprise
Once an organization has decided it wants a controlled AI environment, one component still has to run somewhere in particular: the model. Serving it is a distinct question from where the rest of the environment sits, and...