Our SaaS runs on our own inference. Not someone else's public API.
TruSecure TruSecure GRC processes AI tasks on hardware TruSecure itself operates, inside OVH's French and German datacenters — not a shared, public, multi-tenant AI service — by default, for every customer, with no extra configuration required. Your data is never used to train a shared or external model.
This matters more in governance than anywhere else. The data an AI governance platform reads — your control gaps, your open risks, your incident history — is the most security-sensitive data you own. Where the inference runs is not an implementation detail; it is the product's trust foundation.
Where processing happens
The boundary, drawn: your governance data and the inference that reads it stay inside infrastructure TruSecure operates. The public-API path exists only if you explicitly open it yourself:
What runs where
| AI workload | Where it runs |
|---|---|
| Control mapping and classification | TruSecure-operated infrastructure · OVH France/Germany |
| Evidence summarization | TruSecure-operated infrastructure · OVH France/Germany |
| Policy drafting | TruSecure-operated infrastructure · OVH France/Germany |
| Gap and drift detection | TruSecure-operated infrastructure · OVH France/Germany |
Want to choose your own model instead?
TruSecure Community Edition is model-provider agnostic — point it at a local model, a private AI gateway, or any enterprise-approved provider you choose.
See inference configuration optionsFrequently asked questions
Is private inference an add-on or included by default?
Included by default, for every TruSecure GRC customer.
Is our data ever used to train external models?
No.
The monitoring loop
continuous · every 6 hours- 01
01
Connect
Read-only connectors into AWS, Azure, GCP, on-premise.
AWSAzureGCPon-prem - 02
02
Collect
AI pulls compliance evidence every 6 hours — not at audit time.
every 6 h - 03
03
Detect
Gaps and control drift flagged the moment they appear.
24/7 - 04
04
Remediate
Routine fixes closed automatically; the rest routed to you.
auto - 05
05
Approve
A named person decides. The approval is the record.
logged
The 80/20 advantage. AI handles the tedium — evidence, testing, gap analysis, routine fixes. Your team keeps the interesting 20%: strategic decisions, policy exceptions, risk acceptance.
The short answer
TruSecure GRC processes AI tasks on hardware TruSecure operates inside OVH's French and German datacenters by default — not a public, shared third-party AI API — and customer data is never used to train any shared or external model.