Security reviews and procurement
What to hand your security team, and how we work with them.
Updated August 2026
Material to start with
- alluqi.ai/security — the data-path and architecture overview.
- The security model on the Learn site — identity, pairing, and what hosted services store and never store.
- This help center’s Privacy and security collection for the operational details.
The short pitch to a reviewer
The architecture is the answer: prompts, files, and model outputs stay on customer-controlled hardware. Alluqi’s hosted surface is small — accounts, device pairing, and a relay that carries end-to-end encrypted traffic it cannot read.
Working with your process
Security questionnaires, architecture walkthroughs, and pilot-scoped reviews are all normal parts of an engagement. Raise them at alluqi.ai/quote and they get folded into the plan.
Can Alluqi staff see my files or chats?
Alluqi staff can see account details needed for support, never your local files or chats.
Does Alluqi offer a DPA?
Contact sales for data processing terms. Alluqi does not offer a DPA today.
Can I discuss HIPAA requirements with Alluqi?
Bridge keeps patient data on your hardware and Alluqi never sees it; contact sales about HIPAA requirements. An external or cloud model provider you choose is governed by that provider’s terms.