Security overview
Where your data lives, how it is protected, who can see it, and the records that back every claim on this page.
Ferrith is a UK-hosted AI workspace built for organisations that cannot send client material to a US (or other region) AI provider, law firms, local authorities, healthcare. Privacy is engineered in.
Your content stays in the UK
Your documents, your conversations, the AI model that reads them, the vault that manages your encryption keys, and the identity service that signs you in all run in the United Kingdom, on Civo's London region. We use open-weight AI on our own infrastructure, your prompts are never sent to OpenAI, Anthropic, Google, or any other external AI API, and we run our own key vault and our own identity service in-region, so there is no third-party key or identity provider in the path.
The external suppliers that do exist are billing (Stripe) and the delivery of sign-in emails (Microsoft), neither ever sees your content. The full list, with what each supplier sees and a change feed you can subscribe to, is published at Sub-processors.
Encrypted with a key that can be yours
Every workspace's data is encrypted at rest with its own key, using AES-256 (NIST post-quantum security level 5) for data at rest. On the managed plan, keys live in Ferrith's own UK-hosted vault, and operator access is gated and fully audited: every key use is logged, and no third-party key service is ever involved.
With Bring Your Own Key (BYOK), the key lives in your own vault, an Azure Key Vault, Managed HSM, or OpenBao. Revoke Ferrith's access and your workspace is unavailable within one cache cycle.
Honest about how AI works
To answer a prompt, any AI assistant must read your content and Ferrith decrypts it in memory, in the UK, at request time, and never logs it or stores content beyond the request.
No phone-home. No tracking. No training on your data.
Your data is never used to train a model. No external telemetry of your content; no content in our logs. Support works with you on your screen, not by opening your data. This documentation site itself sets no cookies and runs no scripts.
Auditable AI workflows
When Ferrith chains AI steps into a workflow, every step is logged, the routing is deterministic, not a black-box autonomous loop, and you can require human review before any output is finalised.
A member of the NVIDIA Inception program
Ferrith is a member of NVIDIA Inception, a program that supports startups building with AI and accelerated computing. Every reply, search and document read in Ferrith runs on NVIDIA GPUs hosted in the UK. Membership gives NVIDIA no access to your workspace, and none of your content is ever sent to NVIDIA.
The records behind this page
- Sub-processors — the current list, its change log, and the feed: Sub-processors.
- ICO registration — Ferrith is registered with the Information Commissioner's Office, registration number ZC228586.
- Legal documents — published on this site at permanent versioned URLs.
- Security questions — support@ferrith.com.