Your data stays under rules you control.
Run Celara in your own cloud account today. Hosted is coming soon on our platform, with each organization’s data isolated. Either way you keep your keys, your identity provider and evidence you can export.
- Your admins set up SAML or OIDC themselves
- A person sees only the tools their role allows
- Every action carries the person’s identity
- Agents act under their own identity
- Runs inside your boundary
- Each agent leaves its own audit trail
- Support gets in only when you grant access
- Only the models you allow
- A call to a model off the list does not run
- Exceptions need two names
- Encrypted at rest and in transit
- Personal data redacted before storage
- Retention set by each organization
- Erasure with proof
- Never used to train models
- No one can edit an entry after the fact
- Blocked reads are logged too
- Refused calls are recorded as entries
- Audit logs streamed to your SIEM
- Your admins set up the export themselves
- Called with your keys
- Only the providers you chose
- Nothing goes to another AI vendor
Your cloud account today. Hosted on our platform soon.
Choose where Celara runs. Either way your data lives in a place you can name.
Bring your own account
Available nowCelara runs in your cloud account.
- Memory, documents and ledgers stay in your account
- The database lives in your account too
- Isolation is yours to control
Hosted
Coming soonWe run Celara for you on our platform.
- Every access is logged
- Runs in a US region
- Organizations isolated at the database level
Your identity provider. A name on every action.
People sign in through the identity provider you already run. Their role decides what they can use, and the record shows who did what.
Single sign-on you set up
Your admins connect your identity provider over SAML or OIDC themselves, from your settings.
Tools follow the role
A person sees only the tools their role allows.
Every action carries a name
When a person starts an action, it carries that person’s identity all the way to the record.
Agents have their own identity
Each agent acts under its own identity and leaves its own audit trail.
Personal data caught early. Erased with proof.
Your data is encrypted at rest and in transit. Personal data can be redacted before it is stored, and erased on request.
- Encryption. Data is encrypted at rest and in transit.
- PII redaction. Switch it on and personal data is redacted before it reaches memory.
- Erasure with proof. An erasure request removes a person’s data from every store, and an audit record of the erasure is kept.
- Your retention. Each organization sets how long its data is kept.
- Never used for training. Your data is never used to train models.
A record no one can rewrite. Sent to the tools you use.
Every check, approval and refusal is written to an append-only ledger. Export it to the security tools you already run.
- Append-only evidence. No one can edit an entry after the fact.
- Exceptions need two names. The approver is never the person who asked, and both are recorded.
- Blocked reads are logged too. A refused attempt leaves a record, the same as one that was allowed.
- Export to your SIEM. Your admins export audit logs to your SIEM themselves.
Only the models you allow. Called with your keys.
You keep the list of models Celara may call. Every call is checked against it.
Your models, your keys
Agents call only the models you allow, with your keys, on your provider bill.
Off the list, no call
A call to a model outside your list does not run.
No other AI vendor
Nothing goes to another AI vendor. Prompts and data reach only the providers you chose.
Everything your reviewers need. In one request.
Tell us who you are and we’ll send the packet to your security team.
Architecture overview
How Celara runs, what connects to what, and where your data lives.
Completed security questionnaire
Our completed answers to a standard security questionnaire.
Request the packet
Questions security reviewers ask.
Do you have SOC 2?
Not yet. With Bring your own account, Celara runs in your cloud account under your own controls. The security packet covers our architecture and controls.
What leaves our account?
Model calls go only to the providers you chose, with your keys. We receive anonymous usage data, the minimum we need to track billable usage. We also receive health and performance telemetry so we can support you well. You can turn it off in your organization settings.
Can you see our data?
With Bring your own account, we have no standing access. Support gets in only when you grant access, for a set time, and every access is logged in your audit trail. With Hosted, each organization is isolated and every access is logged.
How do we report a vulnerability?
Email security@celara.ai. We review every report.
Bring your security team.
Book a session with your reviewers in the room. We’ll walk through how Celara runs in your account and the evidence it keeps.