At Capacity, we understand the importance of data security for enterprise clients. That is why we have developed our Answer Engine® to prioritize data protection from the ground up, while seamlessly connecting to content at scale. With an ISO 27001 Certification dating back to 2020, it upholds a steadfast dedication to the highest standards of data security. Hosted on Microsoft Azure, Capacity’s Answer Engine ensures the confidentiality, security, and compliance of your valuable data. Moreover, it offers the flexibility of being hosted in your company’s Microsoft Azure Private Cloud Tenant or your tenant in Microsoft Azure Government Cloud.
A Culture of Data Confidentiality
Recognizing that our greatest asset is the trust our clients place in us, we have made data security a cornerstone of our corporate ethos. We implement robust encryption, access controls, and compliance measures to safeguard your sensitive information against unauthorized access or disclosure both internally and externally. Combining the immense security capabilities of Microsoft Azure with Capacity’s culture of security and data privacy ensures your organization’s data stays safe.
Capacity’s Answer Engine: An Arsenal of Security Features
- End-to-End Encryption: The Answer Engine’s encryption capabilities ensure that your data is encrypted both at rest and in transit, providing an impenetrable layer of protection against unauthorized interception.
- Single Sign on (SSO) and User Access Controls: We implement stringent access controls, multi-factor authentication (MFA), and role-based access to restrict access to authorized personnel only.
- Regulatory Compliance: The Answer Engine teamed with Azure provides adherence to global compliance standards including ISO, GDPR, CCPA/CPRA, HIPAA, and SOC, we ensure that our data security practices align with regulatory requirements and industry best practices.
- Web Application Security: Capacity’s Answer Engine employs industry-standard web application firewalls which monitor traffic, prevent malicious intrusion, and protect our infrastructure from certain types of attacks. These capabilities not only help to keep our clients’ data secure, they also help to ensure the reliability, performance, and consistency that users expect from a modern web application.
- An Answer Engine® Not a Document Manager: It does not store documents only metadata. Your unmodified original document stays in your source system secured by your corporate policies and access.
- Retrieval Augmented Generation: We pioneered the use of the Retrieval Augmented Generation approach. Our Answer Engine works without an LLM and optionally uses generative/LLM’s to help users leverage the answer’s as found. Through our expertise and generational advancements in application of this technology, your data stays safe because the LLM only receives what it needs to in order to provide a Synopsis(SM) or generative response.
- Private, Optional, Company Selectable GPT Services: Capacity understands that every organization is on its own path for the use of LLMs and GPTs. All of our GPT usage is private and enterprise-secure, you can provide your own model to be deployed, and you can even turn off GPT entirely while still getting all of the great benefits of the Answer Engine® for work.
- Capacity’s Answer Engine (IAM) Authorization: Data access is defined by roles defined in the system. Only Authorized users have access to the information.
Secure, Read-Only Connection and Metadata Storage
When our clients authorize the Answer Engine to connect to their data or system of record, we ensure that the connection is established securely and with their explicit consent to specific data resources. Upon creation of the read-only connection, a dedicated partition is created for metadata storage exclusively for the client, ensuring data isolation and confidentiality.
Automated Document Indexing and Metadata Generation
Once the sources are defined, our document Indexers spring into action, fetching authorized files and using our proprietary algorithms to generate rich metadata about them. This metadata enhances data organization, searchability, deeper insights and analysis for our clients. The original documents are never stored in the Answer Engine or modified. They remain only in the source system of record.
Automated User and Source Provisioning
Depending on the client’s need, we support a wide range of strategies for provisioning users and the content they have access to. Capacity’s Answer Engine offers support for RFC 7642/7643/7644 or SCIM for user provisioning, connecting directly to our clients’ Microsoft Entra ID environment or similar identity management service where it makes sense. Source connectivity may be established at the highest level with the Answer Engine automatically separating private access folders in the index so that only users with permission may search that content. We supply our clients with the tools they need to provision both company-shared and team-local sources in order to maximize the value of search to each user.
Role-based Access and User Empowerment
Users within our clients’ organizations are granted access to data based on their access to source systems and documents, ensuring that each individual has access only to the information relevant to their responsibilities. Access control strengthens data security, fosters collaboration, and increases productivity within the organization.
Within the Answer Engine, users are granted roles and attributes which manage secure access within the system. Roles and attributes are granted by either the admin, the auto-provisioning strategy, or a combination of both. User roles and attributes not only manage access but are also used for reporting and audit. The Answer Engine’s admin controls make it easy to see and manage one user, one role or attribute, and an overview of the landscape of all users and everything they have access to.
Capacity: Your Partner for Data Security
Through our standards, our processes, and our culture, Capacity is focused on world class data security so you can be assured your data is safe. We empower your employees with the information they need to learn more, achieve more, and save time. As your latest hire, from day one, Capacity’s Answer Engine is a champion of security at your company. In a world of amazing promises and demos coming from AI companies, Capacity has put in the work to ensure your data remains safe.