Privacy & Compliance
How Dexal handles data custody today, and the self-hosted option available to organizations with strict compliance requirements.
Managed Cloud vs. Self-Hosted AI
| Feature | Dexal Managed (default) | Self-Hosted AI (Enterprise) |
|---|---|---|
| Data Custody | Stored in tenant-isolated cloud infrastructure, scoped to your org | Runs on your own infrastructure, scoped through an Enterprise agreement |
| Third-Party Access | No cross-tenant access; see our Security page for details | No cross-tenant access, plus infrastructure control stays with you |
| Setup & Maintenance | Nothing to install or maintain — we run it for you | You provide and maintain the infrastructure; Dexal configures the software |
| Internet Dependency | Required to use the platform | Can run offline, depending on how you deploy it |
| Model Training | Your content is never used to train any model | Your content is never used to train any model |
| Data Breaches | Protected by tenant isolation and encryption — see Security page | Exposure is limited to your own infrastructure |
| HIPAA / GDPR Fit | We do not yet hold formal certifications (see Security page) | Can be scoped to your compliance requirements as part of an Enterprise agreement |
| GDPR Right to Delete | Requested through your account or by contacting us | You control deletion directly on infrastructure you operate |
The Bottom Line
Dexal Managed handles hosting, maintenance, and updates for you, with your data kept isolated to your organization.
Self-Hosted AI is available as an Enterprise add-on for organizations whose compliance requirements call for running the AI layer on infrastructure they control.
What Organizations Ask About
Where does our data live?
On Dexal Managed, your organization's data is stored in tenant-isolated cloud infrastructure and is only visible within your org, scoped by role. See our Security page for the specifics of how isolation is enforced.
Is our content used to train AI models?
No. Whether you use the managed AI add-on or a self-hosted deployment, your content is never used to train any model.
What if we need infrastructure we control?
Organizations with strict compliance requirements can run the AI layer on their own infrastructure through an Enterprise agreement. This is scoped case-by-case — talk to us about your requirements.
Where do we stand on formal certifications?
Dexal is an early-stage company and does not yet hold certifications such as SOC 2 or ISO 27001. We won't claim them until we do — see our Security page for where things stand today.
Compliance Frameworks
Attorney-Client Privilege
Confidentiality of client communications
- •Tenant-isolated data on Dexal Managed
- •No cross-tenant access
- •Self-hosted option available via Enterprise for firms that require it
HIPAA
Healthcare Privacy
- •Encryption at rest + in transit
- •Access controls + audit logs
- •No formal HIPAA certification today — see Security page
GDPR
Data Protection (EU)
- •Right to access, correct, delete data
- •No cross-tenant data sharing
- •Deletion requests handled through your account or by contacting us
Note:This page explains Dexal's architecture in the context of compliance. It is not legal advice. Consult your firm's compliance officer or external counsel before implementing any AI solution.
Have Specific Compliance Requirements?
If your organization needs the AI layer to run on infrastructure you control, that's scoped through an Enterprise agreement. Tell us your requirements and we'll walk through what's possible.
20-minute free call. We'll walk through your specific compliance needs.