How your code is handled.
The answers your security team looks for, on one page you can forward. Built for systems that can't leave the building.
At a glance
Security certified
SOC 2 and ISO 27001
On-premise deployment
Including air-gapped environments
Customer-managed LLMs
Your data stays in your control
Code, not data
We work from code and schemas, never production data
NDA first
Signed before any code moves
Your environment
Or ours, as your security team prefers
You choose where it runs, and which model reads your code.
Every engagement is set up with your security team before any code moves. The same choices apply to the grounding sample and to the full engagement.
Documents your reviewers can ask for.
Questions reviewers ask
Where does the work run?
Where your security team prefers: in your environment, including on-premise and air-gapped setups, or in ours.
Do you need production data?
No. We work from source code and schemas only.
Can we use our own LLM?
Yes. Enrichment runs on your LLM, or on one you approve.
Which certifications does Swimm hold?
SOC 2 and ISO 27001. Request the SOC 2 report.
What happens to our code after the engagement?
Your code stays yours. Retention and where the Swimm platform runs are agreed with your team in the contract.
Bring your security questions.
Invite your reviewer. We'll go through your checklist together.