K9 AI logoK9 AI
Menu
Sign In

Security

Your data stays yours.

Built for organisations that answer to auditors. Only controls that exist today.

Email security
  • Processed and stored in Sydney
  • Never trained on your data
  • IRAP assessment to PROTECTED underway
  • MFA mandatory for admins
  • Optional customer-managed encryption keys
  • Independently pen tested

Our promise

Your prompts and files
aren’t used to train AI.

Your prompts, files and responses are excluded from AI model training. This applies across K9 AI plans.

  • No training, everNo user or organisation data trains any AI model.
  • Requests sent through K9’s account.Requests use K9’s provider account. Review prompt content for details that could identify your organisation.
  • Clear provider data-retention terms.Review model-provider retention terms and logging settings as part of your security assessment.

Every request

Review sensitive details before they reach AI.

For sensitive prompts, review the details identified for redaction before sending. Detected details are replaced with placeholders and restored on your screen when the response comes back.

Sovereign by design

Your prompts and files are processed in Australia.

  • AI models run in Sydney, with no cross-region routing
  • Chats, files and audit logs are stored in Sydney
  • Only billing details go offshore, to Stripe. Never chat or AI data
Billing only → StripeSydney
Chats, prompts, files and answersBilling details only (no chat or AI data)

Customer-managed keys

Your keys. Your data.

Encrypt your organisation’s conversations and uploaded files with an encryption key only your organisation controls. K9 AI asks your key to unlock content as it is needed. Revoke access and, within minutes, that content can no longer be read by anyone, including K9.

  • Opt-in for each organisation, set up by your administrator
  • Every use of your key is logged on your side
  • AES-256 encryption, with each item bound to your organisation
  • Applies to content created after you switch it on

Controls

Defence in depth.

Data residency

  • Models pinned to Sydney
  • Chats, files and logs stored in Sydney
  • Private, multi-zone database

Sensitive information

  • 60+ Australian identifier detectors
  • Credentials and secrets caught
  • Warns before sensitive content is sent

Data loss prevention

  • Your own keyword, identifier and regex rules
  • Block, warn with a reason, or redact
  • Test rules in a sandbox before they go live

AI attack defence

  • Prompt-injection screening
  • System-prompt leaks blocked
  • Canary tokens detect data leakage

Identity and access

  • MFA, with re-checks for sensitive changes
  • Short sessions, stolen-token revocation
  • SSO via SAML, OIDC or LDAP
  • SCIM 2.0 provisioning from Entra ID or Okta
  • Per-organisation IP allow-list

Audit and response

  • Every prompt logged
  • SIEM forwarding with retry and replay
  • eDiscovery search and export, with a stated reason
  • Compliance API with scoped, expiring keys
  • One-click user or org quarantine

Records and retention

  • Keep until deleted, or 30 days to 7 years
  • Legal holds on an org, user or conversation
  • Deletion covers search index, prompt logs, files and vectors
  • Personal data export and a Privacy Act request register

Transparency and policy

  • Users see who accessed their content, when and why
  • Admins choose the features, models and tools on offer
  • Optional PSPF classification banner on every screen

Safe Sharing Studio

  • Reviewed, redacted Word and PDF copies
  • Approval before every download
  • Metadata and tracked changes stripped

Assurance

No badges we haven’t earned.

IRAP

Underway · December 2026

ISM controls

Aligned

Privacy Act 1988

Designed to comply

Penetration test

Completed
The fine print +
  • Web search is off by default. If your administrator turns it on, only the search terms are sent to external search providers; it is always blocked for OFFICIAL: Sensitive and PROTECTED work.
  • Subscription payments are processed by Stripe, so billing details (such as name, email and card) are handled outside Australia. Stripe never receives any chat, prompt, file or AI data.
  • If you cancel, your data is kept for 30 days in case you change your mind, then permanently deleted, and it ages out of our daily backups within a further 35 days. Tax invoices are kept for five years, as Australian tax law requires.
  • Models from Mistral and NVIDIA, run in Sydney. The pen test summary is available to enterprise customers under NDA. Our controls support your governance evidence; they don’t certify Essential Eight maturity or an IRAP assessment.
  • Customer-managed keys cover message text and uploaded files created after they are switched on. Conversation titles, timestamps and file names, generated documents and inline image previews are not yet covered.

Visit the trust centre for sub-processors, data residency and document requests

Vulnerability disclosure

Found a security issue?

Report it to security@k9cyber.com.au with enough detail for us to reproduce it. Do not include customer data you may have accessed.

  • In scope: chat.k9cyber-ai.com, its API and the K9 AI applications we operate.
  • Please do not run denial-of-service, social engineering or physical tests, and do not access, change or keep other people's data beyond what is needed to show the issue.
  • We acknowledge reports within two business days, keep you informed while we fix the issue, and credit you if you wish.
  • We will not pursue legal action against good-faith research that follows these guidelines.

Machine-readable contact details are published at /.well-known/security.txt.

Need the detail for your assessors?

Get the security pack, or email security@k9cyber.com.au. We reply within one business day.

Start free trial