Kairos by OurGrowth
Security, with clear boundaries.
Start with where data lives, who can reach it and how AI work is governed.
Where does our data live?
It depends on the option. Cloud and BYOTOK are served from Cloudflare's network: workspace data is placed in its Asia-Pacific infrastructure, typically Singapore, on a best-effort basis, and models run where the provider you enable runs them. With BYOC, data stays in your infrastructure, though frontier-model inference may cross regions. Air-gapped keeps everything inside your closed environment. For data that must stay in Thailand, choose BYOC in Thailand or Air-gapped.
Who can see it?
Work is private until its owner shares it. Admins manage access. Publishing company-wide requires a second person to approve one version.
What is recorded?
Sign-ins, settings changes, approvals and publishing are recorded in a tamper-evident audit log. The agent's reads and actions also appear in its workspace's activity record. Through the connectors we ship, actions with an outside effect wait for a person's approval. We cannot vouch for third-party MCP servers.
Which AI provider sees our prompts?
The model provider selected for the work receives the prompts sent to it. Admins can restrict providers by data class. BYOTOK uses your own model keys or AI contract; Air-gapped uses local models inside your environment.
Can we run it with no internet?
Yes. On-premise deployments are designed to run without an internet connection, with open-weight models you run; frontier models are not available offline. Renewals and upgrades are delivered by file. Hardening for air-gapped sites, such as an egress allow-list and locked storage, is on the roadmap.
Can we bring our own identity provider?
Contact us with your identity provider and sign-in requirements before choosing a deployment. We will confirm the integration and configuration for your environment.
How are organisations kept apart?
Each organisation has its own deployment. No two organisations share storage; data, users and roles are separate.
Certification and work in progress.
Developed by HarmonyX, which is ISO/IEC 27001 certified. Extending certification to the hosted service is in progress; OurGrowth's SOC 2 Type I and ISO/IEC 42001 are in progress.