That's the architecture, not a policy. It runs on your hardware, behind your firewall. Operator runs on your hardware, behind your firewall. Your data stays private, we monitor only the health of the Operator.
Most "private AI" is a promise you can't verify. Operator is a box in your building, on hardware you own. We will not publish how the internals are put together. That is a deliberate choice, not an omission. But you can see where it lives, and you can pull its logs any time.
Inference runs on a unit in your office, on hardware you own. Three things leave the box, all of them for the service itself: health checks, updates, and escalations when something needs a human. Nothing else goes out. An escalation carries Operator health information and the IT support issue the business approved sending, and nothing else.
Operator reads your files where they already live. There is no feature anywhere in the product that sends your work product to us, because we never need it.
Your data is exposed to the size of your office, not the size of the internet.
Operator is built and run by people who've spent their careers in IT operations and cybersecurity: NOC and SOC analyst work, WAF engineering, endpoint security, and remote-access administration for global industrial companies. We don't just talk about security; we've run the systems that protect it.
Privacy on a box in your building is a fact you can walk to and touch.