1 · Privacy
Runs inside your AWS account
- Deployed into your own AWS account — privileged material never leaves your boundary.
- Encrypted with your own customer-managed KMS keys (BYOK).
- PII Shield masks personal identifiers before the model ever sees a document — context preserved, identity protected.
- AWS Bedrock (Claude) in-region (us-east-1) over PrivateLink: zero data retention, never trained on.