# Onky.ai — Security & compliance summary

> Nothing you share is used to train AI.

Onky runs open-source models to protect your company IP and keep your data confidential. Nothing you share ever reaches an AI lab.

## Residency

- Open-source models: no frontier AI lab in the loop
- No model training: on your data
- Retention you control: deletion on request
- No vendor lock-in: open weights, models you can swap
- Runs where you need it: cloud, VPC, on-premise, air-gapped

## Regulatory posture

- DPA at pilot signing: Onky acts as your data processor from day one [Today]
- UK & EU GDPR: consent-based capture, retention controls, deletion on request [Today]
- EU AI Act: built around its obligations [Today]
- Onky.ai Ltd: registered in the UK, Companies House 16490131 [Today]
- ISO 27001: certification in progress [In progress]
- SOC 2 Type II: audit in progress [In progress]

## Contact

Security questionnaires and one-page summaries: security@onky.ai
Full page: https://onky.ai/security