Your data.
Your rules.
When you give AI access to your operations, the first question is never does it work. It is always: is it secure? Forra was designed to answer that at every layer.
Trust
Audited, certified,
and independently verified.
External Penetration Tests
The Forra platform is regularly tested against by Yack, an independant offensive security specialist. They independently audited Forra to validate our infrastructure and data security.
Encryption by Default
Data encrypted at rest and in transit using industry-standard protocols.
SOC 2 Compliant
Independently audited and certified. Forra cloud platform has received the SOC 2 Type I certification.
Data sovereignty
Your cloud or ours.
Choose where your data lives. Both options include the same platform, the same features, and the same security standards.
SaaS
Hosted in Canada, fully managed by the Forra team.
- Fully managed infrastructure
- Full control over available models: commercial or open-source
- Automatic updates and maintenance
- Start deploying in minutes
- Data hosted in Canada (Canada East)
- AES 256 at rest, TLS 1.2+ in transit
Your cloud
Azure, AWS, or on-premise. Fully isolated in your environment.
- Complete data sovereignty: your infrastructure, your rules
- Full control over available models: commercial or open-source, self-hosted or external
- Network-isolated, air-gapped deployment available
- Compliance with Canadian data residency requirements
- Full SSO (SAML/SCIM) and Active Directory integration
- Hosting fully separated from Forra’s shared cloud infrastructure
Security & trust
Fortified by design, not bolted on.
AES 256 encryption, Zero Trust architecture, full data sovereignty. Built into every layer, not bolted on after the fact.
No training on your data.
Your data is never used to train any AI model. It transits only through enterprise APIs from providers (OpenAI, Anthropic, Google), under contractual confidentiality and non-retention agreements.
Encrypted at rest and in transit.
AES 256-bit encryption at rest. TLS 1.2+ in transit.
Respects your permissions.
A sales rep cannot access HR data, even by accident. Forra enforces your existing access rules at every query. No bypass, no parallel ACLs.
In your infrastructure.
Forra deploys inside your own infrastructure: a fully isolated environment hosted in your Azure, AWS, or on-premise tenant.
Ongoing protection
We keep Forra running.
You stay focused on your business.
Performance monitoring
Continuous monitoring of performance and infrastructure availability. Issues caught before they reach your team.
Issue resolution
We identify and fix routine anomalies that affect expected behavior, keeping Forra running as intended.
Security updates & remediation
Security patches, platform updates, and vulnerability fixes, all shipped proactively.
Frequently asked questions
How does Forra encrypt data?
All data is protected by AES 256-bit encryption at rest and TLS 1.2+ in transit. Encryption applies end to end, whether Forra runs in our cloud or in your own Azure, AWS, or on-premise environment.
Does Forra use our data to train AI models?
No. Your data is never used to train any AI model. It transits only through enterprise APIs from providers (OpenAI, Anthropic, Google), under contractual confidentiality and non-retention agreements.
Where can Forra be hosted?
Forra can be hosted in our managed cloud (Canada East), in your own Azure or AWS environment, or fully on-premise. All options include the same platform, features, and security standards.
How does Forra handle access management?
Forra connects to your existing identity provider: Azure AD, Okta, or Google Workspace. Role-based access is provisioned from your directory, and every user sees only what they are already authorized to access in your source systems.
What happens to our data if we stop using Forra?
Your data remains yours. Upon termination, all data is exported or securely deleted according to your instructions. Nothing is retained by Forra or any third party.
Can we bring our own AI models?
Yes. Forra supports bring-your-own-model deployments. You can connect your own fine-tuned or proprietary models alongside the platform's default capabilities.
