How we handle your data
GuardAI sits between your application and your model provider. This page describes what happens to data in that path and where the system can run.
Data in transit
Prompts and responses
Prompts and draft responses pass through GuardAI for policy evaluation. Audit records contain decision metadata, excluding response content by default. Content logging and persistent response caching are configured separately. Set storage access and retention for your deployment.
Model provider terms
GuardAI forwards requests to your chosen model provider. Data handling between your organization and that provider is governed by your existing agreement with them. GuardAI does not change those terms.
Defense layer processing
GuardAI's defense layer uses Google Vertex AI to evaluate prompts and responses against your configured policies. This applies regardless of where GuardAI is deployed, managed cloud, your VPC, or on-premises. Prompt and response content sent through the defense layer is subject to Vertex AI's data governance policies.
Summary
- Policy-decision metadata recorded for review
- Response content excluded from audit records by default
- Content logging and persistent caching configured separately
- Defense layer uses Vertex AI (all deployments)
- Model provider terms for your chosen LLM unchanged
- TLS in transit between all components
Where GuardAI runs
The managed service runs on Google Cloud Platform. For organizations with stricter data residency or isolation requirements, GuardAI can also be deployed in your own infrastructure. All deployments require outbound connectivity to Vertex AI for defense layer processing.
GuardAI-hosted on GCP. Fastest path to production. We manage infrastructure, updates, and availability.
Deploy the GuardAI container in your own VPC. You control network boundaries and data residency. Requires outbound access to Vertex AI.
Run the GuardAI container on your own hardware. You manage the host environment. Requires outbound access to Vertex AI for defense layer processing.
Questions about security or data handling?
We can walk through deployment options, data flows, and operational fit for your specific use case.