EN
Contact Us

Security

Security and compliance

How Kuartal keeps your data, your models and your users inside your control.

Request our security overview
Security

Our principles.

01

Your data stays in your walls.

We deploy AI where your data already lives. In air-gapped deployments, nothing connects to the public internet.

02

You own your models.

We use open-weight models that run on your hardware.

03

No third-party AI APIs in the data path.

Customer deployments do not send prompts or documents to external AI providers. Free AI features on our public sites use formula-based logic and optional in-browser models; no paid AI APIs.

04

Least privilege, human in the loop.

Access is role-based and consequential actions need a person to approve them.

05

Built for local law.

We design each deployment around the data-protection and data-residency rules of the country it runs in.

Security

The regulatory frame.

Data-protection law

What it requires (summary, not legal advice)
Obligations for whoever controls or processes personal data, such as security, a lawful basis, data-subject rights and breach notification, often backed by significant fines.
How Kuartal deployments are designed to support it
Processing stays inside the customer perimeter; the customer controls access and logs.

This summary is for information only and is not legal advice. Each institution remains responsible for its own compliance; Kuartal works with your legal and compliance teams.

Deployment security.

  • Network isolation: air-gapped or segmented deployment options.
  • Role-based access control and single sign-on with Kuartal ID.

Encryption standards, audit logging, the offline update process, the list of models and their licences, and the incident response process are being documented and will be published here before launch.

Certifications.

Kuartal is an early-stage company. We do not yet hold formal certifications. Our roadmap includes data-protection compliance work and security accreditation.

Responsible AI.

  • Human review of consequential outputs.
  • No use of customer data to train models for other customers.
  • Clear labelling of AI-generated content.

Procurement questions.

Does any data leave our premises?

In an air-gapped deployment, no. In a connected deployment, outbound connections follow your own policy.

Who owns the model?

Kuartal deploys open-weight models, so the model runs and stays on your hardware. Ownership of model weights is set out in each agreement.

Which models do you use?

Capable open-weight language models that run without calling an external service. The list of supported model families will be published here.

Are you certified?

Not yet. Kuartal is an early-stage company and does not yet hold formal certifications. Our roadmap includes data-protection compliance work and security accreditation.

Where is Kuartal based?

Mataram, Lombok, West Nusa Tenggara, Indonesia.

Report a vulnerability

If you believe you have found a security issue in a Kuartal site or product, please email us with the details. Please do not share it publicly until we have responded.

hello@kuartal.id

Request our security overview

Ask for the security overview, or talk to us about your compliance requirements.

Email us

Let's talk.

Bring AI inside your walls.

Ask for the security overview, or talk to us about your compliance requirements.

Talk to us Deployment models hello@kuartal.id