Security & data sovereignty
AXTO is built so your data stays yours. You bring the AI keys, your work is encrypted per member, and nothing is used to train models — with self-hosted editions for full control.
Bring your own key (BYOX)
Every request runs on your own AI credentials. Your keys are stored encrypted and used only for your requests — never shared, never used for anyone else.
Per-member encryption
Your saved work is encrypted at rest with a key derived per member (AES-256-GCM). Even our storage never holds it in the clear.
No training on your data
We never use your content to train models. Your prompts and outputs are yours.
Privacy Vault on-device
PII detection and redaction run entirely in your browser — the original text is never uploaded.
Self-hosted sovereignty
Run the Docker editions on your own infrastructure — cloud, on-prem or air-gapped. No telemetry, no call-home.
Hardened platform
Built on Cloudflare's edge with strict transport security, signed sessions, rate limiting and fail-closed licensing.
Responsible disclosure
We welcome reports from security researchers. If you believe you've found a vulnerability, please email hello@axto.io with details and steps to reproduce. Please give us reasonable time to remediate before public disclosure, and do not access or modify other users' data.