Deployment & Security
Client-controlled by design
Each capability is marked tested, built or planned. Nothing on this page is an independent security assessment or a certification.
| Capability | What it means for you | Status |
|---|---|---|
| Client-controlled deployment | The offline edition installs on your own GPU server from a bundle copied in by your team (for example from an external drive).22 Oct 2026: offline bundle installed with no internet on an NVIDIA L4 server, all outbound traffic blocked. 0 outbound connection attempts from G.R.I.T. Repeated 23 Oct 2026 with the Fintech-tuned G.R.I.T Core: 0 outbound connection attempts from G.R.I.T. | Tested |
| Local inference | G.R.I.T Core runs on your server. Questions and documents are not sent to an outside AI service.22 Oct 2026 air-gap test: answers written on the server's own GPU; 108 of 108 Fintech written-answer checks passed, 0 leaks. 23 Oct 2026, Fintech-tuned G.R.I.T Core, offline: 108 of 108, 0 leaks. | Tested |
| Local embeddings and retrieval | Document reading, embeddings and search run on your server.Ran with no internet in the 22 Oct 2026 air-gap test. | Tested |
| Local storage | Documents, sections and the audit log stay in a database on your server.Ran with no internet in the 22 Oct 2026 air-gap test. | Tested |
| Permission-aware access | Each search runs inside the person's access level, set by grade and department. Restricted content is not read for them.21 Oct 2026 test run: 0 leaks across all 10 demo industries. | Tested |
| Source-backed answers | Every written answer cites its document and section. Without an approved source, G.R.I.T says so.Covered by the 21 Oct 2026 test run (search side). | Tested |
| Human approvals | Drafted actions follow the approval chain set for that action. Nothing is sent before a person approves.Approval chains are configured per action in every demo industry. | Built |
| Audit log | Append-only record of sign-ins, questions, denials, drafts and decisions. Answer text is not stored.Edits and deletes are blocked in the database. | Built |
| Separation between clients | Each client runs its own installation. Nothing is shared between installations.One installation per client. | Built |
| Controlled offline updates | Updates arrive as a new offline package delivered to your team and installed by them. There is no automatic internet update.22 Oct 2026: version 0.1.0-rc2 upgraded to 0.1.0-rc3 with no internet; documents and settings kept. | Tested |
| Offline licensing | Licence checks that work without internet access. | Planned |
| Data-retention settings | Configurable retention periods for logs and documents. | Planned |
Fully air-gappedNo network path to the internet at all. Tested 22 Oct 2026 on a GPU server with all outbound traffic blocked.
On-premiseRuns in your building or data centre on your hardware. May still have internet access.
Private cloudRuns in a cloud account you control. Not air-gapped.
Network-restrictedOutbound traffic limited by your firewall rules. Not the same as air-gapped.
Controls you configure
Your rules, set once
Access levels by grade and department, the approvers for each workflow, and which documents are loaded. G.R.I.T enforces what you set.
Support
Support without a back door
Support for offline installations works without any remote connection by default: on-site visits by GauriLabs, and diagnostic logs exported by your team and shared with us.
Updates
Controlled offline packages
New versions arrive as an offline package. Your team checks the checksums and installs it. G.R.I.T never updates itself over the internet.
Public demo
Not a security proof
Walkthroughs use a cloud-hosted demo with fictional companies. The demo is not air-gapped and is not a security proof.