LoricAI cannot read your data. Here's why.
For security professionals and the curious
All data is encrypted using AES-256-GCM on your device before transmission. Encryption keys are derived from your password using Argon2id with a unique salt. Keys never leave your device and are not stored on our servers.
We operate on a zero-retention model. Encrypted data is processed in-memory only. No plaintext ever touches disk. Compute nodes have no persistent storage for user data. All session data is purged after processing.
Every computation produces a cryptographic proof (using SNARKs) that verifies correct execution without revealing data. Users can independently verify that their queries were processed correctly. Full audit trails are available in your dashboard.
Our zero-knowledge architecture means access control is cryptographic, not policy-based. Even with full database access, without your local key, data remains indecipherable. Employee access is impossible by design, not by policy.
GDPR compliant by architecture. HIPAA-ready (BAA available). SOC2 Type II certification pending. We exceed regulatory requirements because we cannot access data to violate them.
Ready to try the most private AI assistant?
Request Early Access