01
We host it for you.
Paperbase provisions and manages it in your cloud account, using your keys. Get the outcome without building a cloud team.
Discuss managed deployment ›Your organizational intelligence stays inside your perimeter.
Paperbase gives your teams a permanent memory layer without taking ownership of your data, keys, models, or infrastructure.
SOC 2 Type IIISO 27001
Paperbasepermanent memory layer01Your cloudYour keys
02Your infrastructureYour team
03Air-gappedNo connectivity
Deployment
One product. Three ways to keep control.
Choose the operating posture that matches your risk model, regulatory requirements, and internal capabilities.
02
Host on your own infrastructure.
Run Paperbase in your existing cloud account with your own IT and cloud team. Built for enterprises with data-residency requirements.
Discuss self-managed deployment ›03
Air-gap.
Run it on your hardware, fully disconnected, with no inbound or outbound connectivity. For environments where connectivity itself is a risk.
Discuss air-gapped deployment ›Data ownership
Your VPC. Your keys. Your models.
The memory layer holds the institutional reasoning of your organization. It is the highest-value dataset a vendor can ask you to share. We treat it accordingly.
01Data stays where you deploy it.
02Your identity provider governs access.
03Your models and keys remain yours.
04No customer data trains anyone else's model.
Governance
Every action has a record.
Operate the memory layer with the same controls you expect from the rest of your infrastructure.
Make institutional reasoning accountable.
Every agent action, access event, and change is logged and replayable. Your team decides what is retained, invalidated, or forgotten.
RBAC and SSO
Your identity provider. Your roles. Enforced at the memory layer.
Replayable audit log
Trace every agent action and every change end to end.
Retention controls
Define what stays, what expires, and what is invalidated.
Time-boxed access
Contractors and service accounts expire automatically.
Compliance
Built with the highest level of security.
Our posture is documented in the controls and deployment plan, making it easy for your security team to evaluate.
StandardStatus
SOC 2 Type 1Compliant
SOC 2 Type 2Compliant
ISO 27001Compliant
GDPR alignmentCompliant
HIPAAPlanned
HITRUSTPlanned
NISTPlanned
Security review
Bring the hard questions.
We will share the security details, deployment plan, and certifications.
Talk to our security team