Built so your data never has to leave.
Vectalk was designed for organisations that cannot afford to get AI wrong — banks, hospitals, manufacturers with customer data, government departments. Here is exactly what that means.
Certifications
- ISO/IEC 27001:2022 · Information security
- Certificate no. ISMS/CCFB/0826
- Issued by QCC (Quality Control Certification)
- Valid until August 2029
- ISO/IEC 42001:2023 · AI management
- Certificate no. AIMS/C6C7/0826
- Issued by QCC (Quality Control Certification)
- Valid until August 2029
What never leaves your infrastructure
On your servers, your cloud or an enterprise instance, all of it stays on the infrastructure you choose.
Sensitive data is masked and encrypted before any AI model sees it, on every option. On your servers, your cloud or an enterprise instance, there is also no call to any public AI provider.
- Your documents
- Your embeddings and index
- Your questions and answers
- Your access rules and logs
Access and audit
- Role-based and field-level access applied before retrieval
- Masking of sensitive fields
- Immutable audit log of every query, every retrieved passage, every answer
- Exportable for internal audit or a regulator
- 10:42:07QUERYrole: finance · “Which invoices were paid above the contracted rate?”#9f3a
- 10:42:07ACCESSrole and field rules applied before retrieval#c21e
- 10:42:08RETRIEVEVendor_Agreement_2024.pdf · page 14#07bd
- 10:42:08MASKbank a/c masking…#e5a2
- 10:42:09ANSWERanswer with source · logged#4c90
Rules, not judgement
Retention, residency, disclosure and sector rules (DPDP, RBI, SEBI, IRDAI, as applicable) are written as policy and enforced by a rule engine.
The AI never decides what is permitted; it works inside what is permitted.
Deployment options
Your servers
Your cloud account
NeoPhoenix servers
Same product, same rules, your choice.
In progress and planned
We will update this page when each is done; we do not list them as done before then.
- SOC attestationIn progress
- CERT-In empanelled VAPT report
- Formal SBOM