Security
Your matters stay yours.
Encryption, access control, and in-country hosting for Arabic-first legal work. Keep the keys and the cloud when your mandate requires it.
Controls
Built for the most sensitive matters
Encryption in transit and at rest
Connections use TLS. Stored documents and metadata are encrypted so matter data stays confidential in motion and at rest.
Workspace access control
Role-based permissions, project ACL, and firm boundaries so only authorized people can view or change sensitive matter data.
No training on your content
Customer content is not used to train foundation models. Inference uses contractual no-training and minimal-retention terms with providers where the contract requires it.
In-country hosting
Keep matter data in supported countries. KSA and UAE are available today, with more jurisdictions on the roadmap.
Enterprise identity
Microsoft Entra and SSO for enterprise tenants, so your identity provider remains the source of truth for who can sign in.
You control the data lifecycle
You choose what to upload. Request export or deletion to match your retention policy and contract.
Deployment
Run Qanu where your data must live
Same product. Three tenancy models, from multi-tenant cloud to a stack that runs in your account.
Pro and Team
Qanu Cloud
Qanu-hosted multi-tenant workspace. Encryption, access control, and in-region hosting without operating your own cluster.
Enterprise
Isolated Qanu-hosted
A dedicated stack operated by Qanu. Logical isolation, enterprise SSO, and BYOK for inference keys as the default.
Ministries and Govs
Customer cloud
BYOC: Qanu runs in your AWS, GCP, or SCCC account. You own the cloud account, backups, and audit trail. We ship the software.
Keys and inference
BYOK and private inference
BYOK is bring-your-own inference keys. BYOC is Qanu in your cloud. They stack: ministries often want both.
Need customer-managed storage keys (CMK) for data at rest? Ask us. That path is an Enterprise conversation, not a default.
BYOK
Bring your own LLM keys. Enterprise default. Qanu does not train on your matters, and your provider contract stays yours.
Private inference
Run inference in your VPC with your keys, or use a Qanu-hosted gateway with an egress allowlist for regulated networks.
FAQ