SECURITY AND COMPLIANCE
Your code. Your cloud. Your rules.
Everything your security, privacy and procurement teams ask, on one page.
- Where it runs
- In your own cloud account in the region you choose, or on your own servers.
- Which models
- Any, chosen per workspace and per agent.
- Who can do what
- Single sign-on, roles per workspace and a named permission behind every action.
- What leaves
- Nothing. The platform sends nothing to us.
- What it costs
- Spend caps you set.
- What is recorded
- Every decision and every model call.
WHERE IT RUNS
In your environment, in the region you choose.
- In your own AWS, Google Cloud or Azure account, in Europe or the US.
- Or on your own servers, even with no internet access.
- Your database and your keys.
YOUR MODELS
Your models. Your cloud. Your region.
Any model: Claude, GPT, Gemini, GLM, Llama, Mistral and other open-source models, or your own. Choose per workspace, even per agent.
Where you need it: in Europe for European organisations, in the US for American ones, or strictly inside your own environment. Your AWS, Google Cloud or Azure account in the region you choose, or your own servers, even with no internet access.
Nothing leaves: the platform sends nothing to us, no telemetry. Your code and data stay in your environment; in a joint pilot, our people work with them only there, alongside your team.
Fully sovereign when you need it: on your own servers with open-source models, DevCurrent runs with no third party involved at all.
European by birth: DevCurrent AS is a Nordic company, based in Oslo.
A policy per workspace keeps every model call in your region, for example EU only, or on-site.
NOTHING LEAVES
Your code and data stay with you.
- No telemetry: the platform sends nothing to us.
- Your code and data never leave your environment. In a joint pilot, our people work with them only there, under a pilot agreement.
- Credentials and personal data are masked before any model sees them.
COMPLIANCE
Compliant with GDPR and the EU AI Act.
- Every change the AI makes is marked.
- DevCurrent supports your data protection impact assessment (DPIA) and your work with NSM's basic principles for ICT security.
- The compliance pack is yours on request: a GDPR statement, a DPIA template, an AI Act mapping, a security whitepaper and the data flows.
IDENTITY AND ACCESS
The right person, the right access.
- Single sign-on with Entra ID, Okta, Google or Auth0.
- Users and groups provisioned from your directory with SCIM.
- Roles per workspace, and a named permission behind every action.
- A second person confirms before anything goes into production.
WORKSPACES
Every team in its own workspace.
Each team, business unit or customer gets its own workspace, with its own roles, keys, models and audit trail. Unlimited users.
AGENTS UNDER CONTROL
Agents work inside fixed limits.
- Agents never get a shell.
- Every build and every test runs isolated.
- No secrets are within their reach, and secrets are encrypted at rest.
AUDIT
Every decision on record.
A tamper-evident audit trail of every decision and every model call. Export it for your auditors, and set how long it is kept.
COST CONTROL
You decide what it may cost.
Spend caps for the whole platform, per project and per analysis. When a cap is reached, spending stops until someone approves more. Dry runs cost nothing in model use.
SECURITY CONTACT
Found a vulnerability?
Write to security@devcurrent.no. We follow responsible disclosure, and the contact details are also in our security.txt.