Security
Security for confidential fund documents.
LPAs are highly sensitive documents. That is why Adamant Assets processes contract data in a controlled AWS EU environment, without transfer to external AI APIs.
Architecture
Controlled and traceable data flows.
Each step is confined to a small number of clearly separated systems: browser, app server, AI processing and result delivery.
- BrowserHTTPS / TLS
- App serverAWS EU region
- AI serverInternal access only
- ResultSources and audit trail
No transfer of contract data to external AI APIs
Infrastructure
Infrastructure for institutional requirements.
Separate server roles
The app server and AI processing run separately. The AI server is started only for audits and stopped afterwards.
AWS Stockholm
Production operation in eu-north-1 (Sweden/EU). Contract data is not passed to external AI APIs.
Closed AI processing
Internal AI services are not publicly accessible and are addressed only by the app server.
Row Level Security
Tenant isolation at database level, server-side session validation and time-limited download links.
In standard operation: AWS EU region, no open SSH access, secrets in AWS Secrets Manager, security headers, rate limits and signed internal requests. AWS remains a US provider; legal requirements such as a DPA, TOMs and private deployment options are agreed before a client project.
Comparison
Adamant Assets compared with generic AI tools.
| Feature | Adamant Assets | Generic tools |
|---|---|---|
| Data region | AWS EU region, EU data residency | Depends on provider and contract |
| AI processing | No external AI APIs | Often external model providers |
| Server access | AWS Session Manager, no open SSH | Provider-dependent |
| Abuse protection | Rate limits, HMAC signatures, one-time audit tokens | Depends on product design |
| Audit trail | Login, logout and audit events | Provider-dependent |
| Tenant isolation | Row Level Security | Varies |
Compliance
Security standards
- EU data residencyActive
- AWS ISO 27001Active
- AWS BSI C5Documented
Clarify your security requirements with us
Speak to our team about data region, access control and your internal review requirements.