Your data.
Your rules.
Your ERP data, production logs, and operational knowledge never leave your control. No training on your data. No external access. Every user sees only what they’re already authorized to.
Trust
Audited, certified,
and independently verified.
External Penetration Tests
The Forra platform is regularly tested against by Yack, an independant offensive security specialist. They independently audited Forra to validate our infrastructure and data security.
Encryption by Default
Data encrypted at rest and in transit using industry-standard protocols.
SOC 2 Compliant
Independently audited and certified. Forra cloud platform has received the SOC 2 Type I certification.
Data sovereignty
Your cloud or ours.
Choose where your data lives. Both options include the same platform, the same features, and the same security standards.
SaaS
Hosted in Canada, fully managed by the Forra team.
- Fully managed infrastructure
- Full control over available models: commercial or open-source
- Automatic updates and maintenance
- Start deploying in minutes
- Data hosted in Canada (Canada East)
- AES 256 at rest, TLS 1.2+ in transit
Your cloud
Azure, AWS, or on-premise. Fully isolated in your environment.
- Complete data sovereignty: your infrastructure, your rules
- Full control over available models: commercial or open-source, self-hosted or external
- Network-isolated, air-gapped deployment available
- Compliance with Canadian data residency requirements
- Full SSO (SAML/SCIM) and Active Directory integration
- Zero data exposure to third-party cloud providers
Security & trust
Fortified by design, not bolted on.
AES 256 encryption, Zero Trust architecture, full data sovereignty. Built into every layer, not bolted on after the fact.
No training on your data.
Your prompts, files, and generated outputs never leave your infrastructure. Model providers cannot access this data to train their algorithms.
Encrypted at rest and in transit.
AES 256-bit encryption at rest. TLS 1.2+ in transit.
Respects your permissions.
Every user sees only what they are authorized to access. Forra enforces your existing access rules. No bypass, no parallel ACLs.
In your infrastructure.
Forra deploys inside your own infrastructure: a fully isolated environment hosted in your Azure, AWS, or on-premise tenant. Data stays entirely under your control.
Ongoing protection
We keep Forra running.
You stay focused on your business.
Performance monitoring
Continuous monitoring of performance and infrastructure availability. Issues caught before they reach your team.
Issue resolution
We identify and fix routine anomalies that affect expected behavior, keeping Forra running as intended.
Security updates & remediation
Security patches, platform updates, and vulnerability fixes, all shipped proactively.
Frequently asked questions
How does Forra encrypt data?
All data is protected by AES 256-bit encryption at rest and TLS 1.2+ in transit. Encryption applies end to end, whether Forra runs in our cloud or in your own Azure, AWS, or on-premise environment.
Does Forra use our data to train AI models?
No. Your prompts, files, and generated outputs are never used to train any AI model. Data stays in your infrastructure and is never shared with model providers.
Where can Forra be hosted?
Forra can be hosted in our managed cloud (Canada East), in your own Azure or AWS environment, or fully on-premise. All options include the same platform, features, and security standards.
How does Forra handle access management?
Forra connects to your existing identity provider: Azure AD, Okta, or Google Workspace. Role-based access is provisioned from your directory, and every user sees only what they are already authorized to access in your source systems.
What happens to our data if we stop using Forra?
Your data remains yours. Upon termination, all data is exported or securely deleted according to your instructions. Nothing is retained by Forra or any third party.
Can we bring our own AI models?
Yes. Forra supports bring-your-own-model deployments. You can connect your own fine-tuned or proprietary models alongside the platform's default capabilities.