Skip to content
Security

Your servers, your data

Where your risk data lives, what connects out, and what your team runs.

Updated 7 October 2026

Riskamy runs on your own servers, in your cloud account or data centre, so your risk data never leaves your network and we never see it. You choose the AI model it works with, including one that runs fully offline, and every action, by people and AI alike, is on permanent record.

Where your risk data lives

Registers, assessments, control ratings, incidents and user accounts are stored in your environment, on infrastructure you control. Riskamy is never hosted by us, so there is no copy of your risk data on our side to breach, subpoena or lose.

The AI connection

The only AI Riskamy uses is the one you connect, under your own account and your provider’s terms. Connect a model running on your own hardware and nothing leaves your network at all.

Every action on record

A permanent history of who did what and when: ratings, approvals, comments, imports and configuration changes. Actions taken by the AI or by automation are recorded too, and labelled as such.

A shorter security review

Because the vendor never hosts, sees or processes your data, there is no third-party processor to assess, no data-residency question to answer and nothing to add to your sub-processor list.

What your team runs

Riskamy runs on a single server and upgrades are one command. Your team owns the hosting, network, backups and certificates, as it does for your other internal systems. We guide you through setup.

If you ever stop

Your data stays on your servers. There is no export scramble and nothing held hostage.

See it on your own register. Bring the spreadsheet you use today.

Book a demo