Security

Security built in, not bolted on

From fine-grained permissions to on-prem deployments, Curiosity keeps your data controlled and compliant.

Book a Demo

Check Documentation

How it works

Security and Governance by Design

Enforce permissions, audit access, and stay compliant without slowing down development.

Access Done Right

Relationship-based access control. Users only see data they own or belong to, enforced at every query.

Audit Without Overhead

Every query, tool call, and model turn is logged automatically. No extra instrumentation needed.

Governance Built-In

Deploy on your own infrastructure. Data stays on your network, with full control over what reaches external providers.

Capabilities

Security capabilities

Enterprise-grade security across identity, data, and deployment.

On-prem Deployment

Runs on your infrastructure. Data never leaves your network unless you choose a hosted model provider.

Encryption at Rest

Encrypted with a master key you control. Disk-level encryption supported on top.

Encryption in Transit

All traffic to the workspace and to model providers is encrypted in transit.

AI Data Control

Choose which fields are embedded and which provider receives them.

SSO and Identity

Integrates with Entra ID, Okta, Google, Auth0, and any SAML 2.0 provider.

ReBAC Permissions

Access is a graph question. Users see only what their team membership and ownership allow.

Query Enforcement

Every query is filtered by the caller's permissions. No post-filter that can drift.

Endpoint Security

Custom endpoints run under the calling user's identity. Access control is enforced at every retrieval.

Scoped API Tokens

Token types for connectors, external systems, and users. Each scoped to the minimum needed.

Token Revocation

Revoke instantly. Revoking the JWT key invalidates all sessions at once.

ACL Sync

Permissions mirrored from source systems at ingestion. No separate management needed.

Audit Log

Every admin action, token use, and endpoint call is logged with full context.

Security

Security built in, not bolted on

How it works

Security and Governance by Design

Capabilities

Security capabilities

Enterprise-grade security across identity, data, and deployment.

Developers

Questions for developers

Which model does Curiosity run?

What can I build on Curiosity?

How does the knowledge graph work?

Can I run models on my own system?

Can I connect custom data sources?

How do I build agents?

Can I extend the platform with custom logic?

Can I run Curiosity on my own infrastructure?

How are permissions enforced in what I build?

How do search and embeddings work together?

How do I get started?

Connected knowlege for AI systems

Connected knowlege for AI systems