Deployment options
Secure wherever you operate. Govern wherever you deploy.
From a SaaS rollout in minutes to a fully isolated deployment in your own data center, Colchix fits your infrastructure, your risk posture and your regulators.
Managed by Colchix
Start fast, without running any infrastructure.
Controlled by you
For stricter infrastructure or residency requirements.
EU · NetherlandsHosted in the EU today. Other regions on request.
A diagram of SaaS: Colchix cloud · shared, isolated per organization. Your people, AI agents and data stay inside your organization; the Colchix OS, with ARGUS, TALOS, ATHENA and THEMIS, sits between them and the AI tools you use.
How your data moves
Visibility without unnecessary exposure
Each agent processes only what its job needs. Follow one prompt through Colchix: seen as metadata, masked before it leaves, kept as evidence without its values, on your settings.
- 01
ARGUS · Connect
Sees the activity, not the content
Which AI tool, when and from which team: metadata, so you see AI usage without reading anyone's work.
- 02
THEMIS → TALOS · Protect
Masks it before it leaves
THEMIS finds the sensitive values and TALOS swaps them for tokens, so the AI never receives them.
- 03
ATHENA · Govern
Keeps the record, not the values
What happened and which rule it proves, as audit evidence: counts and categories, never the data itself.
- 04
You · Control
Decides how long and where
Retention, region, roles and the deployment model stay your settings, in your environment.
Built on layers of trust
Security isn't an add-on. It's built into every layer
From encrypted data and controlled access to isolated infrastructure and day-to-day safeguards, Colchix is designed to protect the place where your AI governance lives.
- 01
Encryption
Data encrypted in transit and at rest, in every deployment.
- 02
Access control
Roles and permissions decide who sees what, and nobody gains a role by accident.
- 03
Infrastructure isolation
Each organization's data kept apart in the database, or a deployment of your own.
- 04
Operational security
Monitoring and logging behind day-to-day use, every admin action on the audit trail.
- 05
Data governance
Retention, region and minimisation, set to your policy, not ours.
- 06
Review readiness
Built to pass your security review, with the documents to back every answer.
Vendor assessments
Your security team will have questions.We'll answer every one.
A governance platform sees how your organization uses AI, so it should pass the strictest review you run. Send us your questionnaire: our team fills it in with you, with the documents behind each answer.
- Answer your security questionnaire
- Share the technical documentation
- Review the architecture with you
- Discuss custom requirements
A security questionnaire about Colchix, its questions answered one by one: data hosted in the EU or in your own environment, encrypted in transit and at rest, owner, admin and viewer roles, sensitive data masked by TALOS before it leaves, and prompts never stored.
Transparency builds trust
Security shouldn't be a promise. It should be documented
Everything your security, IT and compliance teams need to review Colchix. Read the policies now, and tick the rest into your security pack: we send it, or walk you through it.
Your infrastructure. Your data. Your control.
No one-size-fits-all deployment.
Choose the Colchix that fits yours.
- Any AI tool
- Prompts never stored
- Live in 5 minutes
Colchix governs the AI tools your teams already use, among them ChatGPT, Claude, Gemini, Microsoft Copilot, Cursor, Mistral, Perplexity, DeepSeek, GitHub Copilot, Grok, Notion AI, Hugging Face, Meta AI, Qwen, Ollama.
Security FAQs
Your questions about Colchix security, answered.
Where can Colchix be deployed?
In four ways: as SaaS, run by Colchix; as a single-tenant environment, run by Colchix just for you; in a private VPC in your own cloud account, on AWS, Azure or Google Cloud; or on-premises, in your own data center. SaaS and single-tenant are available now; private VPC and on-premises are set up on request, with our team.
Where is our data processed and stored?
Colchix is hosted in the EU, in the Netherlands, today, and other regions are available on request. Nothing in the path that serves you leaves the EU. In a private VPC or on-premises, your data stays in your own environment.
What data does Colchix collect and keep?
Each agent keeps only what its job needs. ARGUS collects metadata: which AI tools, apps and sites are used, when and how often, never what people type or the contents of files, and devices are pseudonymised on the device itself. TALOS reads a prompt only to mask its sensitive values before it reaches the AI. ATHENA keeps the records audits need, counts, categories and decisions, never the values themselves. How long activity is kept is your organization's setting: 90 days by default.
Explore ARGUSHow does Colchix handle prompts and files?
Prompts are never stored. TALOS finds the sensitive values in a prompt, a name, an IBAN, a health record, and replaces them with tokens before it leaves, so the AI service never receives them. The AI services you use remain bound by their own terms for what they do receive.
Explore TALOSHow are access and permissions managed?
With roles: owners, admins and viewers, each seeing and doing only what their role allows, so responsibilities stay separate across teams. Data is encrypted in transit and at rest, each organization's data is kept apart, and every admin action is recorded on the audit trail.
What security documentation is available for our review?
Our security policy, privacy policy, sub-processors, responsible disclosure and AI transparency pages are public. The Data Processing Agreement, our security measures, the infrastructure and deployment documents and the data handling and retention documents are shared with customers and prospects: tick them into your security pack on this page. Send us your security questionnaire and our team fills it in with you.
Ask AI about Colchix security
Get an independent answer. The question's ready, pick your assistant.
