Can a foreign court make our provider hand over our data?
On your data center and air-gapped deployments, Aleria holds no copy and no access: there is nothing to hand over. Hosted in the UAE, a UAE entity under UAE law.
Every layer of your AI, inside your border.
Aleria builds the whole stack: the app your staff use, the connectors, the models, the cloud and the data centers. Run it in our data centers, in yours, with no internet at all, or as a country's own. Your security team can test every claim on this page.
The same five layers in each. Only the border moves.
Residency is not control.
Data residency answers one question: where the data sits. Your board, your regulator and your auditor will ask six more.
Can someone outside the country switch us off?
Not on your data center or air-gapped deployments: licences work offline and there is no remote path.
Who at Aleria can log in tonight, and from where?
Nobody, by default. Emergency access needs your approval, is time-boxed and lands in your SIEM.
Which model wrote this answer, and does it call home?
Every model is in a register with its origin and licence, runs inside your boundary and calls nothing outside it.
If we leave, how long until we are out, with everything?
Everything exports in open formats, and deletion comes with a record.
Can we prove all of this to an auditor?
Every action by a person or an expert is logged and exportable, and every claim on this page comes with a check.
Five kinds of control, and a check for each.
Data
Your documents, prompts, answers and logs stay inside the boundary you choose.
Check: The egress testOperations
Your people run it, or ours do, inside your border. No standing Aleria access on your own deployments.
Check: The access logTechnology
Models and keys sit on hardware you can point to. Keys are generated in your HSM.
Check: Hash the model weightsLaw
One contract and one jurisdiction per deployment: UAE law in the UAE, national law for a national AI factory.
Check: The entity chartContinuity and exit
It keeps running without us, and you can leave with everything, in open formats.
Check: An exit drillWho can reach which layer.
Pick someone. The layers they can reach light up, and the rest stay dark. On your own deployments nobody at Aleria reaches anything unless you open the door, and every opening is logged.
Hosted by Aleria, our operators run the infrastructure, and every support access shows in your admin console.
- Applications
- Your data
- Models
- Infrastructure
- Chips and energy
An AI expert never has more access than its owner.
Every expert has an owner, a scope and an off switch. Inside your organization it acts; anything going outside waits for a person. Every action lands in your SIEM.
Approval · Reconciler
Post 20 payment drafts to Oracle AP for March?
ReviewApprove
Reconcilerowner: head of finance · scope: AP read, drafts write
Pause- 08:31head of finance approved 20 drafts
- 08:32posted through the Oracle approval flow
- 08:32exported to your SIEM
Choose the boundary by how sensitive the data is.
Move up a level when the classification changes. The app, the experts and the connectors stay the same.
| Hosted by Aleria | Your data center | Air-gapped | National AI factory | |
|---|---|---|---|---|
| Best for | Teams and most enterprise work | Banks, health, regulated data | Classified work | Governments, every agency |
| Operated by | Aleria, in the UAE | Your team, installed by ours | Your team | A national operator, with Aleria |
| Keys | Aleria or you | You | You | The state |
| Aleria access | Approved and logged | None by default | None | As the state decides |
| Internet | Yes | Updates only | None | As the state decides |
| Law | UAE | Yours | Yours | National |
| Start | This week | Weeks | Weeks | Months |
Don't take our word for it. Test it.
The first check decides most conversations. Nine more follow, and your team runs all ten in about two weeks.
- 1
Put the Aleria deployment behind a default-deny firewall.
- 2
Run a week of real work: requests, automations, updates.
- 3
Read the firewall log. While it runs, you should see zero outbound connections.
- KeysGenerate them in your HSM, revoke one, confirm the data becomes unreadable
- AccessRead the access register, trigger an emergency request, watch it reach your SIEM
- Off switchCut the link to Aleria and confirm it keeps running
- UpdatesVerify the signature on an offline bundle before you install it
- ModelsHash the weights and compare them with the register
- Sub-processorsGet the list per deployment; air-gapped has none
- LogsTrace one answer back to its model, its sources and its user
- ExitExport everything and open it in other tools
- DeletionDelete a workspace and receive the deletion record
Every commitment, per deployment.
| Question | Our commitment | How you verify it |
|---|
When a hyperscaler fits, and when we do.
If you need hundreds of cloud services and their certificates today, a hyperscaler sovereign region may be right. If you need the AI stack under one contract, with a no-internet option, that is what we built. Many customers run both.
| Hyperscaler sovereign region | Partner-operated sovereign cloud | Hyperscaler, disconnected | Aleria | |
|---|---|---|---|---|
| Operated by | Local residents of a foreign provider | A local partner on foreign technology | You or a partner | You, or Aleria inside your border |
| With no internet | No | Varies | Yes | Yes |
| Included | Cloud services; models from a catalogue | Varies | A subset of services | The app, the connectors, the models and the GPUs |
| Breadth | The widest | Broad | Narrower | The AI stack |
What your security team will ask us.
You run data centers in other countries. Does a foreign law reach our data?
Each country's stack runs separately, through a local entity. On your data center and air-gapped deployments we hold no copy and no access.
Your GPUs are American. Can they be switched off remotely?
NVIDIA states its GPUs have no kill switches or backdoors, and an air-gapped deployment has no remote path at all.
Hyperscalers have more services and more certificates.
True. We cover the AI stack, from the app to the GPU, under one contract, and Fusion connects to the rest.
What happens if Aleria is acquired or disappears?
Offline licences, open formats and open-weight models on your hardware keep you running.
Air-gapped means stale models.
Models and software arrive as signed offline bundles that your team verifies before installing.
Will your staff see our data?
No standing access. Emergency access needs your approval, is time-boxed and is logged to your SIEM.
Is it certified?
Certificates are shown with their issuer, scope and date when held, and nothing is implied.
Bring your security team.
Ninety minutes with our architects. We bring the architecture brief, the access register and the test plan; you leave with the checklist filled in for your deployment.