Privacy
Privacy is three questions.
What do you keep? Where does it run? Can it leave? AVELIN answers each one at three levels: cloud, hybrid and on-premise. You choose the level for each workload.
Why privacy matters more now
In a 2026 survey of 750 IT, security and AI leaders, 76% said they were highly or extremely concerned about data security and privacy. It ranked first among the AI concerns in the survey.
Source: AvePoint, State of AI 2026, research by Osterman. AvePoint sells data-governance software and commissioned the survey.
Agents make many requests for one task, so more of your data passes through a model. The question is not only who can read a prompt. It is where the prompt runs, what is kept, and whether it can leave. Banning AI does not remove the risk. Control does.
Three levels of control
Choose the level for each workload. The higher the level, the more you decide.
- Level 1AVELIN CloudZero retention by default.
- Level 2HybridYou set the rule for private data.
- Level 3On-premisePrompts are processed on your own GPUs.
| Level | What do you keep? | Where does it run? | Can it leave? |
|---|---|---|---|
| 1. AVELIN Cloud | Zero retention by default. Not used to improve AVELIN. | AVELIN infrastructure, in the United States, Europe and MENA. | Requests are served by AVELIN. If you connect your own providers, their terms apply to what they receive. |
| 2. Hybrid | Set in your written scope. | On your GPUs by default. At a public model after an offload. | Only through the privacy check. You decide whether detected private data may go to a public model or must stay on your GPUs. |
| 3. On-premise | Set in your written scope. | On your GPUs, in your network. | You decide. The scope lists every network path the software opens. |
AVELIN Cloud: zero retention by default
We do not keep the content of your prompts or answers in normal operation. Each request is processed in memory, and your prompts are not used to improve AVELIN.
We keep only the records needed to bill you and keep the service secure: timestamps, the model used, token counts, speed, status codes and your API key. None of it includes the content of your requests.
Opt in to help improve AVELIN
You can choose to share anonymized requests. They help us improve AVELIN, including how Decision AI picks a model.
What we keep is vector representations (embeddings) of your requests, with account identifiers removed. They are not linked to your account.
- Off by default. Nothing is shared unless you turn it on.
- Turn it off at any time. New sharing stops at once.
- The price terms are set in your agreement.
Hybrid: you decide what may leave
In a hybrid deployment, local models run on your GPUs. When a request needs a public model, a privacy check looks for private data first. You decide what happens next: detected private data may go to a public model, or it must stay on your GPUs.
On-premise: the ultimate privacy
AVELIN runs on your GPUs, in your network. Prompts are processed on your hardware, and you decide where it runs and who can reach it.
This is what a sovereign AI platform means: you, not a vendor or a cloud, decide where the system runs and who can reach it. The written scope lists every network path the software opens.
Questions about privacy
What is zero retention?
Zero retention means AVELIN Cloud does not store the content of your prompts or answers in normal operation. Each request is processed in memory, and we keep only the records needed to bill you and keep the service secure. The data policy has the detail.
Do you train on my prompts?
No. Your prompts and answers are not used to improve AVELIN unless you turn on sharing, and you can turn it off at any time.
How do I switch sharing off?
Turn it off in your account settings at platform.avelin.ai. New sharing stops at once.
Where is my data processed?
In AVELIN Cloud, requests are processed in the United States, Europe and MENA. Isolated in-country locations are planned. If your data must stay in one country or region, say so in your POC request. On-premise, requests are processed on your own GPUs.
What does the hybrid privacy check do?
Before a request leaves your GPUs, the privacy check looks for private data. You decide what happens: detected private data may go to a public model, or it must stay on your GPUs.
Does zero retention cover the providers that serve my requests?
AVELIN's infrastructure subprocessors are bound by data processing agreements, and a current list is available on request. If you connect your own providers to Decision AI, their terms apply to what they receive.
Bring your privacy requirements.
Tell us what you must keep, where it must run and what may leave, and we scope a POC around it.