Data stays in Thailand
Customer data stays in Thailand, and AI models run on our GPU servers in a Thai data center. The data center network denies outbound connections by default.
Security and data residency as rules, not options
The design rules we hold every part of the system to, from the database to the AI models.
Data center in Thailand
Document storageOriginals, OCR text, search index
AI modelsThai OCR, search and chat models
Audit chainVerified
Opened
a3f9…2c1eSearched
prev a3f9…Asked AI
prev 7b02…No connection to overseas AI services
Organisations are isolated
Every customer-owned table records its owning organisation and carries a row-level policy in the database. The application connects with an account that cannot bypass that policy.
No leaks, not even hints
A hidden document and a missing document get the identical response. Permission filters sit inside the query, never applied afterwards.
Hash-chained audit log
Append-only, with SHA-256 hashes linking entries into a chain per organisation. The application account may only insert and read. A verification page recomputes the chain and shows its integrity. No passwords, tokens or document content are stored in the log.
Identity and sessions
Accounts are by invitation only. Access tokens last 15 minutes, and sessions are revoked on logout or suspension. TLS is used on every connection.
Uploads are checked
File types are sniffed from content, sizes are limited and files are scanned for malware before processing.
Certifications and standards
We do not currently claim any certification or external audit. If your organisation needs technical detail or the current status of a specific control, please contact us.
Tell us about your documents
Tell us which documents your team searches most. We'll reply with where Sarabun AI stands today and book a demo of the parts that are ready.
Book a demo