{"id":7149,"date":"2026-08-11T10:06:33","date_gmt":"2026-08-11T10:06:33","guid":{"rendered":"https:\/\/www.wiven.ai\/?page_id=7149"},"modified":"2026-08-13T23:12:03","modified_gmt":"2026-08-13T23:12:03","slug":"securite-wivenllm","status":"publish","type":"page","link":"https:\/\/www.wiven.ai\/en\/securite-wivenllm\/","title":{"rendered":"WivenLLM security"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"7149\" class=\"elementor elementor-7149\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e2fb6ed e-con-full e-flex e-con e-parent\" data-id=\"e2fb6ed\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a5d7362 elementor-widget elementor-widget-html\" data-id=\"a5d7362\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<style>\n.wsec *{box-sizing:border-box;margin:0;padding:0}\n.wsec{width:100%;background:#050806;color:#f0f4f0;font-family:'DM Sans',system-ui,sans-serif;line-height:1.6}\n.wsec .wrap{max-width:1080px;margin:0 auto;padding:0 24px}\n.wsec .sec{padding:84px 0}\n.wsec .sec.alt{background:#0c110d}\n.wsec h1{font-size:43px;line-height:1.1;font-weight:700;margin-bottom:20px}\n.wsec h1 .g{color:#2DBE4E}\n.wsec h2{font-size:31px;line-height:1.15;font-weight:700;margin-bottom:14px}\n.wsec h3{font-size:19px;font-weight:700;color:#fff;margin-bottom:10px}\n.wsec p.lead{color:rgba(240,244,240,.78);font-size:20px;line-height:1.6;max-width:780px;margin-bottom:16px}\n.wsec p.body{color:rgba(240,244,240,.75);font-size:18px;line-height:1.65;max-width:800px;margin-bottom:16px}\n.wsec .grid2{display:grid;grid-template-columns:repeat(auto-fit,minmax(300px,1fr));gap:18px;margin-top:34px}\n.wsec .grid3{display:grid;grid-template-columns:repeat(auto-fit,minmax(240px,1fr));gap:18px;margin-top:34px}\n.wsec .card{background:#0c110d;border:1px solid rgba(45,190,78,.14);border-radius:16px;padding:24px}\n.wsec .sec.alt .card{background:#050806}\n.wsec .card p{color:rgba(240,244,240,.75);font-size:17px;line-height:1.6}\n.wsec ul.list{list-style:none;margin-top:26px;max-width:820px}\n.wsec ul.list li{position:relative;padding-left:30px;margin-bottom:18px;color:rgba(240,244,240,.78);font-size:18px;line-height:1.65}\n.wsec ul.list li:before{content:\"\";position:absolute;left:0;top:11px;width:9px;height:9px;border-radius:2px;background:#2DBE4E}\n.wsec ul.list li b{color:#fff;font-weight:600}\n.wsec .btn{display:inline-flex;align-items:center;gap:8px;background:#2DBE4E;color:#04210a;font-weight:700;padding:16px 30px;border-radius:40px;text-decoration:none;font-size:16px;border:0}\n.wsec .btn.sec2{background:transparent;color:#f0f4f0;border:1px solid rgba(45,190,78,.2)}\n.wsec .ctas{display:flex;flex-wrap:wrap;gap:14px;margin-top:32px}\n.wsec .tablewrap{margin-top:34px;border:1px solid rgba(45,190,78,.14);border-radius:14px;background:#050806;overflow-x:auto}\n.wsec .sec.alt .tablewrap{background:#0c110d}\n.wsec table{width:100%;border-collapse:collapse;min-width:720px}\n.wsec th{padding:18px 22px;text-align:left;font-family:'Space Mono','Consolas',monospace;font-size:13px;letter-spacing:2px;text-transform:uppercase;color:#2DBE4E;border-bottom:1px solid rgba(45,190,78,.25);white-space:nowrap}\n.wsec td{padding:18px 22px;font-size:17px;line-height:1.5;color:rgba(240,244,240,.78);border-bottom:1px solid rgba(45,190,78,.10);vertical-align:top}\n.wsec td.k{color:#fff;font-weight:700;white-space:nowrap}\n.wsec .note{border-left:2px solid #2DBE4E;padding:8px 0 8px 22px;margin-top:34px;color:rgba(240,244,240,.75);font-size:17px;line-height:1.65;max-width:840px}\n.wsec .roadmap li{color:rgba(240,244,240,.78)}\n.wsec .roadmap li:before{background:rgba(240,244,240,.35)}\n.wsec .diag{margin-top:38px;border:1px solid rgba(45,190,78,.14);border-radius:16px;background:#050806;padding:26px 22px}\n.wsec .sec.alt .diag{background:#0c110d}\n.wsec .diag svg{width:100%;height:auto;display:block;font-family:'DM Sans',system-ui,sans-serif}\n.wsec .d-lbl{font-family:'Space Mono','Consolas',monospace;font-size:13px;letter-spacing:2.5px;fill:#2DBE4E}\n.wsec .d-h{font-size:19px;font-weight:700;fill:#ffffff}\n.wsec .d-t{font-size:16px;fill:rgba(240,244,240,.82)}\n.wsec .d-s{font-size:15px;fill:rgba(240,244,240,.6)}\n.wsec .d-o{font-family:'Space Mono','Consolas',monospace;font-size:12px;letter-spacing:1.5px;fill:rgba(240,244,240,.55)}\n.wsec .d-g{font-size:15px;fill:#2DBE4E}\n.wsec .d-f{font-size:15px;fill:rgba(240,244,240,.6)}\n@media(max-width:600px){.wsec .diag{padding:16px 12px}}\n.wsec .ico{width:42px;height:42px;border-radius:11px;background:rgba(45,190,78,.09);border:1px solid rgba(45,190,78,.16);display:flex;align-items:center;justify-content:center;margin-bottom:14px}\n.wsec .ico svg{width:21px;height:21px;stroke:#2DBE4E;fill:none;stroke-width:1.6;stroke-linecap:round;stroke-linejoin:round}\n.wsec.anim .rv{opacity:0;transform:translateY(16px);transition:opacity .55s cubic-bezier(.2,.8,.2,1),transform .55s cubic-bezier(.2,.8,.2,1)}\n.wsec.anim .rv.on{opacity:1;transform:none}\n@media(prefers-reduced-motion:reduce){.wsec.anim .rv{opacity:1!important;transform:none!important;transition:none!important}}\n@media(max-width:600px){.wsec h1{font-size:32px}.wsec h2{font-size:25px}.wsec .sec{padding:58px 0}}\n<\/style>\n<div class=\"wsec\">\n\n<section class=\"sec\"><div class=\"wrap\">\n<h1>Security <span class=\"g\">by architecture<\/span>,<br>not by promise<\/h1>\n<p class=\"lead\">WivenLLM is installed on your hardware. Your documents, conversations, and indexes remain where you put them. This page describes precisely what is in place, its scope, and what remains your responsibility.<\/p>\n<p class=\"body\">It covers all three deployment formats. In the hosted format, each client has its own instance: no data, indexes, or databases are shared between organizations. What is shared are the hardware and costs, never the data.<\/p>\n<div class=\"ctas\"><a class=\"btn\" href=\"https:\/\/www.wiven.ai\/en\/contact\/\">Talk to us \u2014 20 min \u2192<\/a><a class=\"btn sec2\" href=\"https:\/\/www.wiven.ai\/en\/wiven-llm\/\">Discover WivenLLM<\/a><\/div>\n<\/div><\/section>\n\n<section class=\"sec alt\"><div class=\"wrap\">\n<h2>What doesn&#039;t leave your home<\/h2>\n<p class=\"lead\">The data is not protected by a contractual promise: it is simply not transmitted.<\/p>\n<ul class=\"list\">\n<li><b>Your data remains on your machine.<\/b> Database, deposited documents, vector index and conversation history reside in the storage folder of the workstation or server you have chosen.<\/li>\n<li><b>No training on your data.<\/b> WivenLLM does not include any model training or refinement mechanisms. Models are used for inference purposes only. Your documents do not contribute to any model, neither ours nor any third party&#039;s.<\/li>\n<li><b>No telemetry is active by default.<\/b> Our default images and settings disable all usage data. Enabling this is an explicit choice on your part, never a setting to discover and then disable.<\/li>\n<li><b>Offline operation possible.<\/b> Using local models and a local vector database, WivenLLM operates without any outbound connections. This is the preferred mode for isolated environments.<\/li>\n<li><b>Auditable open-source models.<\/b> Mistral, LLaMA, Qwen, KIMI. You know what&#039;s playing on your machine.<\/li>\n<\/ul>\n<div class=\"note\"><b>Outgoing connections exist, here they are.<\/b> The initial download of templates and installation resources; web searching, only if you enable it and to the search engine you configure; an external AI provider, only if you choose to connect one\u2014in which case the relevant requests are forwarded to it and are subject to its terms and conditions. In a fully local configuration, none of these connections are used.<\/div>\n<div class=\"diag\"><svg viewbox=\"0 0 920 500\" role=\"img\" aria-label=\"WivenLLM data flow diagram\"><defs><marker id=\"ah\" markerwidth=\"9\" markerheight=\"9\" refx=\"7\" refy=\"4.5\" orient=\"auto\"><path d=\"M0 0 L9 4.5 L0 9 z\" fill=\"rgba(45,190,78,.6)\"\/><\/marker><\/defs><text x=\"32\" y=\"34\" class=\"d-lbl\">YOUR INFRASTRUCTURE<\/text><rect x=\"30\" y=\"48\" width=\"405\" height=\"372\" rx=\"18\" fill=\"rgba(45,190,78,.035)\" stroke=\"rgba(45,190,78,.32)\" stroke-dasharray=\"7 6\"\/><text x=\"55\" y=\"90\" class=\"d-h\">Your computer or your server<\/text><rect x=\"55\" y=\"112\" width=\"350\" height=\"40\" rx=\"9\" fill=\"rgba(255,255,255,.035)\" stroke=\"rgba(45,190,78,.16)\"\/><circle cx=\"76\" cy=\"132\" r=\"3.5\" fill=\"#2DBE4E\"\/><text x=\"92\" y=\"137\" class=\"d-t\">Database<\/text><rect x=\"55\" y=\"162\" width=\"350\" height=\"40\" rx=\"9\" fill=\"rgba(255,255,255,.035)\" stroke=\"rgba(45,190,78,.16)\"\/><circle cx=\"76\" cy=\"182\" r=\"3.5\" fill=\"#2DBE4E\"\/><text x=\"92\" y=\"187\" class=\"d-t\">Documents submitted<\/text><rect x=\"55\" y=\"212\" width=\"350\" height=\"40\" rx=\"9\" fill=\"rgba(255,255,255,.035)\" stroke=\"rgba(45,190,78,.16)\"\/><circle cx=\"76\" cy=\"232\" r=\"3.5\" fill=\"#2DBE4E\"\/><text x=\"92\" y=\"237\" class=\"d-t\">Vector index<\/text><rect x=\"55\" y=\"262\" width=\"350\" height=\"40\" rx=\"9\" fill=\"rgba(255,255,255,.035)\" stroke=\"rgba(45,190,78,.16)\"\/><circle cx=\"76\" cy=\"282\" r=\"3.5\" fill=\"#2DBE4E\"\/><text x=\"92\" y=\"287\" class=\"d-t\">Conversation History<\/text><rect x=\"55\" y=\"312\" width=\"350\" height=\"40\" rx=\"9\" fill=\"rgba(255,255,255,.035)\" stroke=\"rgba(45,190,78,.16)\"\/><circle cx=\"76\" cy=\"332\" r=\"3.5\" fill=\"#2DBE4E\"\/><text x=\"92\" y=\"337\" class=\"d-t\">Open source models<\/text><text x=\"55\" y=\"392\" class=\"d-g\">None of this crosses that line.<\/text><text x=\"565\" y=\"34\" class=\"d-lbl\">POSSIBLE EXITS<\/text><rect x=\"565\" y=\"48\" width=\"325\" height=\"86\" rx=\"13\" fill=\"rgba(255,255,255,.03)\" stroke=\"rgba(45,190,78,.16)\"\/><text x=\"588\" y=\"82\" class=\"d-h\">Downloading the templates<\/text><text x=\"588\" y=\"108\" class=\"d-s\">Once, at the installation<\/text><rect x=\"588\" y=\"116\" width=\"86\" height=\"0\" fill=\"none\"\/><rect x=\"565\" y=\"168\" width=\"325\" height=\"86\" rx=\"13\" fill=\"rgba(255,255,255,.03)\" stroke=\"rgba(45,190,78,.16)\"\/><text x=\"588\" y=\"202\" class=\"d-h\">Web search<\/text><text x=\"588\" y=\"228\" class=\"d-s\">Only if you activate it<\/text><rect x=\"588\" y=\"236\" width=\"86\" height=\"0\" fill=\"none\"\/><rect x=\"565\" y=\"288\" width=\"325\" height=\"86\" rx=\"13\" fill=\"rgba(255,255,255,.03)\" stroke=\"rgba(45,190,78,.16)\"\/><text x=\"588\" y=\"322\" class=\"d-h\">External AI Provider<\/text><text x=\"588\" y=\"348\" class=\"d-s\">Only if you connect one<\/text><rect x=\"588\" y=\"356\" width=\"86\" height=\"0\" fill=\"none\"\/><line x1=\"435\" y1=\"91\" x2=\"552\" y2=\"91\" stroke=\"rgba(45,190,78,.45)\" stroke-width=\"1.6\" stroke-dasharray=\"5 5\" marker-end=\"url(#ah)\"\/><text x=\"493\" y=\"79\" text-anchor=\"middle\" class=\"d-o\">optional<\/text><line x1=\"435\" y1=\"211\" x2=\"552\" y2=\"211\" stroke=\"rgba(45,190,78,.45)\" stroke-width=\"1.6\" stroke-dasharray=\"5 5\" marker-end=\"url(#ah)\"\/><text x=\"493\" y=\"199\" text-anchor=\"middle\" class=\"d-o\">optional<\/text><line x1=\"435\" y1=\"331\" x2=\"552\" y2=\"331\" stroke=\"rgba(45,190,78,.45)\" stroke-width=\"1.6\" stroke-dasharray=\"5 5\" marker-end=\"url(#ah)\"\/><text x=\"493\" y=\"319\" text-anchor=\"middle\" class=\"d-o\">optional<\/text><line x1=\"30\" y1=\"452\" x2=\"890\" y2=\"452\" stroke=\"rgba(45,190,78,.14)\"\/><text x=\"30\" y=\"486\" class=\"d-f\">In a fully local configuration, none of these three outputs are used: WivenLLM operates offline.<\/text><\/svg><\/div>\n<\/div><\/section>\n\n<section class=\"sec\"><div class=\"wrap\">\n<h2>Encryption<\/h2>\n<p class=\"lead\">We prefer to be precise about the scope rather than writing &quot;everything is encrypted&quot;.<\/p>\n<ul class=\"list\">\n<li><b>TLS 1.2 minimum, required.<\/b> Exchanges between workstations and the server are encrypted, the minimum protocol version is explicitly set in the configuration, and clear text access is redirected to HTTPS.<\/li>\n<li><b>Secrets encrypted by the application.<\/b> Provider API keys and unique authentication secrets are encrypted using AES-256, with a derived key specific to your installation.<\/li>\n<li><b>Full encryption of the medium, verified and certified.<\/b> Volume encryption\u2014LUKS, BitLocker, or FileVault, depending on the platform\u2014is a prerequisite for installation. A check at startup will flag an unencrypted volume, and this will be noted in the delivery report you sign.<\/li>\n<li><b>Rotation of the tooled wrenches.<\/b> A re-encryption script allows the application key to be changed without losing existing secrets. The session secret is rotating, with a double-acceptance window during the switchover. Secrets are moved from the environment file to restricted storage.<\/li>\n<li><b>Integrity of internal exchanges.<\/b> The calls between the server and the document processing component are cryptographically signed, which prevents a third party from injecting them.<\/li>\n<\/ul>\n<div class=\"note\">Application-level encryption of the database itself\u2014beyond just protecting secrets\u2014is on our roadmap. Currently, protecting stored content relies on full-media encryption, verified during installation.<\/div>\n<\/div><\/section>\n<section class=\"sec alt\"><div class=\"wrap\">\n<h2>Access, roles and compartmentalization<\/h2>\n<p class=\"lead\">Access is assigned by name, inherited from your directory, and the powers are separate.<\/p>\n<div class=\"grid2\">\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><path d=\"M21 2l-2 2m-7.6 7.6a5 5 0 1 1-7.1 7.1 5 5 0 0 1 7.1-7.1zm0 0L15.5 7.5m0 0l3 3L22 7l-3-3\"\/><\/svg><\/div><h3>Single sign-on by default<\/h3><p>Multi-user mode with OpenID Connect authentication is the default configuration for all deployments. Local password-based login is disabled except for the backup account.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><path d=\"M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z\"\/><polyline points=\"9 12 11 14 15 10\"\/><\/svg><\/div><h3>Double factor inherited from your directory<\/h3><p>Because the connection goes through your identity provider, your own requirements apply \u2014 including the second factor, with no possibility of bypassing it via a local connection.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><circle cx=\"12\" cy=\"12\" r=\"9\"\/><polyline points=\"12 7 12 12 15 14\"\/><\/svg><\/div><h3>Short and revocable sessions<\/h3><p>Session duration is limited. Changing your password, suspending it, or manually revoking it will immediately close all open sessions, including those on other devices.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><line x1=\"6\" y1=\"3\" x2=\"6\" y2=\"15\"\/><circle cx=\"18\" cy=\"6\" r=\"3\"\/><circle cx=\"6\" cy=\"18\" r=\"3\"\/><path d=\"M18 9a9 9 0 0 1-9 9\"\/><\/svg><\/div><h3>Separation of powers<\/h3><p>Technical administration\u2014accounts, roles, connectors, configuration\u2014is performed without access to the content of conversations. Access to the content is handled by a separate role and leaves an indelible trace.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><rect x=\"3\" y=\"3\" width=\"7\" height=\"7\" rx=\"1\"\/><rect x=\"14\" y=\"3\" width=\"7\" height=\"7\" rx=\"1\"\/><rect x=\"3\" y=\"14\" width=\"7\" height=\"7\" rx=\"1\"\/><rect x=\"14\" y=\"14\" width=\"7\" height=\"7\" rx=\"1\"\/><\/svg><\/div><h3>Partitioned workspaces<\/h3><p>A user only sees the spaces to which they are attached. Vectors are isolated by space, in separate namespaces.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><path d=\"M2 3h6a4 4 0 0 1 4 4v14a3 3 0 0 0-3-3H2z\"\/><path d=\"M22 3h-6a4 4 0 0 0-4 4v14a3 3 0 0 1 3-3h7z\"\/><\/svg><\/div><h3>Personal Second Brain<\/h3><p>A user&#039;s working memory is unique to them. It is not visible to their colleagues or managers, and is not implicitly shared.<\/p><\/div>\n<\/div>\n<div class=\"note\"><b>A point we are highlighting rather than remaining silent about.<\/b> Administering the instance does not grant access to the content of the exchanges. This is a default setting, not an option to enable \u2014 and we are happy to demonstrate this during the session.<\/div>\n<\/div><\/section>\n\n<section class=\"sec\"><div class=\"wrap\">\n<h2>Audit log<\/h2>\n<p class=\"lead\">A log that an administrator can delete proves nothing. Ours cannot be deleted from the application.<\/p>\n<ul class=\"list\">\n<li><b>Not deletable from the application.<\/b> The journal is write-only. No manual deletion is possible; only the retention policy you set will cause entries to expire.<\/li>\n<li><b>Wide coverage.<\/b> Connections and connection failures, disconnections, account creation and modification, document access and download, document queries, conversation exports, configuration modifications.<\/li>\n<li><b>Access to the content is itself tracked.<\/b> If an authorized role exports a conversation, the operation is logged, and this logging cannot be disabled.<\/li>\n<li><b>Export to your SIEM.<\/b> The log is continuously streamed to your monitoring system, either via syslog or webhook. Your correlation and retention rules apply.<\/li>\n<li><b>Content control.<\/b> Rules for blocking, masking, or flagging based on terms or patterns, with a log of triggers. Only a truncated extract is kept, never the full message.<\/li>\n<\/ul>\n<\/div><\/section>\n\n<section class=\"sec alt\"><div class=\"wrap\">\n<h2>Supply chain<\/h2>\n<p class=\"lead\">What you install must be verifiable before being executed.<\/p>\n<div class=\"grid3\">\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><circle cx=\"12\" cy=\"9\" r=\"6\"\/><polyline points=\"9 9 11 11 15 7\"\/><path d=\"M8.2 14.2L7 22l5-2.5L17 22l-1.2-7.8\"\/><\/svg><\/div><h3>Signed binaries<\/h3><p>The installers are signed \u2014 Authenticode under Windows, Apple notarization under macOS \u2014 and published with their SHA-256 hash. No warning screen during installation.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><path d=\"M21 16V8l-9-5-9 5v8l9 5 9-5z\"\/><polyline points=\"3.3 7.5 12 12.5 20.7 7.5\"\/><line x1=\"12\" y1=\"12.5\" x2=\"12\" y2=\"21\"\/><\/svg><\/div><h3>Verifiable images<\/h3><p>Server deployments use a versioned and signed image, accompanied by its software inventory and certificate of origin.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><polyline points=\"16 18 22 12 16 6\"\/><polyline points=\"8 6 2 12 8 18\"\/><\/svg><\/div><h3>Check at each modification<\/h3><p>Static code analysis and dependency checking at each change, blocking on high and critical vulnerabilities.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><path d=\"M18 8a6 6 0 0 0-12 0c0 7-3 9-3 9h18s-3-2-3-9\"\/><path d=\"M13.7 21a2 2 0 0 1-3.4 0\"\/><\/svg><\/div><h3>Monitoring and corrective actions<\/h3><p>We monitor security advisories for the open-source components we integrate and report patches. Critical vulnerability: patch released within 7 days. High vulnerability: within 30 days. You are notified via mailing list and in-app banner.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><path d=\"M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4\"\/><polyline points=\"7 10 12 15 17 10\"\/><line x1=\"12\" y1=\"15\" x2=\"12\" y2=\"3\"\/><\/svg><\/div><h3>Signed update<\/h3><p>On the workstation side, the update is signed and verified before application.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><rect x=\"2\" y=\"4\" width=\"20\" height=\"16\" rx=\"2\"\/><polyline points=\"22,6 12,13 2,6\"\/><\/svg><\/div><h3>Responsible Disclosure<\/h3><p>A vulnerability is reported to security@wiven.ai. Acknowledgment within 72 hours, commitment to correction graduated according to severity, and no legal action taken against a researcher in good faith.<\/p><\/div>\n<\/div>\n<\/div><\/section>\n<section class=\"sec\"><div class=\"wrap\">\n<h2>Who does what<\/h2>\n<p class=\"lead\">Having AI installed in your home shifts part of the responsibility onto you. It&#039;s best to put that in writing.<\/p>\n<div class=\"tablewrap\">\n<table>\n<thead><tr><th><\/th><th>Individual workstation<\/th><th>Dedicated server<\/th><\/tr><\/thead>\n<tbody>\n<tr><td class=\"k\">Supply and configuration<\/td><td>Wiven<\/td><td>Wiven<\/td><\/tr>\n<tr><td class=\"k\">Installation and setup<\/td><td>Wiven<\/td><td>Wiven<\/td><\/tr>\n<tr><td class=\"k\">Media encryption<\/td><td>You, verified and attested by Wiven<\/td><td>You, verified and attested by Wiven<\/td><\/tr>\n<tr><td class=\"k\">TLS and certificates<\/td><td>Not applicable locally<\/td><td>Wiven during installation, then you<\/td><\/tr>\n<tr><td class=\"k\">Backups<\/td><td>YOU<\/td><td>YOU<\/td><\/tr>\n<tr><td class=\"k\">Physical security<\/td><td>YOU<\/td><td>YOU<\/td><\/tr>\n<tr><td class=\"k\">Firewall and network<\/td><td>Not applicable locally<\/td><td>YOU<\/td><\/tr>\n<tr><td class=\"k\">Directory, accounts and roles<\/td><td>Not applicable<\/td><td>YOU<\/td><\/tr>\n<tr><td class=\"k\">Security patches<\/td><td>Published and notified by Wiven, applied by you<\/td><td>Published and notified by Wiven, applied by you<\/td><\/tr>\n<tr><td class=\"k\">Monitoring and SIEM<\/td><td>Not applicable<\/td><td>Wiven provides the feed.<\/td><\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<div class=\"note\">This is the counterpart to sovereignty: no one but you can back up a disk that no one but you has access to.<\/div>\n<\/div><\/section>\n\n<section class=\"sec alt\"><div class=\"wrap\">\n<h2>Deletion and reversibility<\/h2>\n<ul class=\"list\">\n<li><b>Granular suppression.<\/b> A document, workspace, or account is deleted from the interface; associated data, including vectors, is removed with it.<\/li>\n<li><b>Export your exchanges.<\/b> The conversations are exported as JSON or CSV. Your source documents have never left your storage folder.<\/li>\n<li><b>After the contract, nothing remains with us.<\/b> None of your data has ever passed through our infrastructure. Therefore, there is nothing to return or delete on our end.<\/li>\n<\/ul>\n<\/div><\/section>\n\n<section class=\"sec alt\"><div class=\"wrap\">\n<h2>Documents<\/h2>\n<p class=\"lead\">Your purchasing and legal teams don&#039;t need a web page, they need documents. Here they are.<\/p>\n<div class=\"grid3\">\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><path d=\"M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z\"\/><polyline points=\"14 2 14 8 20 8\"\/><line x1=\"16\" y1=\"13\" x2=\"8\" y2=\"13\"\/><line x1=\"16\" y1=\"17\" x2=\"8\" y2=\"17\"\/><\/svg><\/div><h3>Subcontracting agreement<\/h3><p>The DPA (Data Processing Agreement) governing the processing of personal data, to be attached to your contract.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><line x1=\"8\" y1=\"6\" x2=\"21\" y2=\"6\"\/><line x1=\"8\" y1=\"12\" x2=\"21\" y2=\"12\"\/><line x1=\"8\" y1=\"18\" x2=\"21\" y2=\"18\"\/><line x1=\"3\" y1=\"6\" x2=\"3.01\" y2=\"6\"\/><line x1=\"3\" y1=\"12\" x2=\"3.01\" y2=\"12\"\/><line x1=\"3\" y1=\"18\" x2=\"3.01\" y2=\"18\"\/><\/svg><\/div><h3>Processing register<\/h3><p>A description of the processing carried out by WivenLLM, its purposes and its legal basis.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><circle cx=\"11\" cy=\"11\" r=\"7\"\/><line x1=\"21\" y1=\"21\" x2=\"16.7\" y2=\"16.7\"\/><line x1=\"11\" y1=\"8\" x2=\"11\" y2=\"12\"\/><line x1=\"11\" y1=\"14\" x2=\"11.01\" y2=\"14\"\/><\/svg><\/div><h3>Impact analysis<\/h3><p>The AIPD, to be taken and adapted to your own deployment context.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><path d=\"M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z\"\/><\/svg><\/div><h3>Security policy<\/h3><p>Our internal rules: access management, patches, secrets and environments.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><circle cx=\"12\" cy=\"12\" r=\"9\"\/><line x1=\"12\" y1=\"8\" x2=\"12\" y2=\"13\"\/><line x1=\"12\" y1=\"16\" x2=\"12.01\" y2=\"16\"\/><\/svg><\/div><h3>Incident procedure<\/h3><p>Who alerts whom, in what order and within what timeframe, with the applicable notification deadlines.<\/p><\/div>\n<div class=\"card\"><div class=\"ico\"><svg viewbox=\"0 0 24 24\"><path d=\"M17 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2\"\/><circle cx=\"9.5\" cy=\"7\" r=\"4\"\/><path d=\"M22 21v-2a4 4 0 0 0-3-3.9\"\/><\/svg><\/div><h3>List of subcontractors<\/h3><p>The list of names of third parties likely to be involved in the chain, and in what capacity.<\/p><\/div>\n<\/div>\n<p class=\"body\" style=\"margin-top:30px\">Our position with regard to the nLPD and the GDPR is documented in this file. The entire file is available upon request, subject to a confidentiality agreement if your procedure requires it. <a href=\"mailto:info@wiven.ai\" style=\"color:#2DBE4E\">info@wiven.ai<\/a><\/p>\n<\/div><\/section>\n\n<section class=\"sec\"><div class=\"wrap\">\n<h2>What we are not yet claiming<\/h2>\n<p class=\"lead\">A security page is only valuable if it also says what is not being done.<\/p>\n<ul class=\"list roadmap\">\n<li><b>No ISO 27001 or SOC 2 certification to date.<\/b> We do not claim this. WivenLLM carries the Swiss Made Software label, which attests to the origin of the development, not to a security audit.<\/li>\n<li><b>No independent penetration tests have yet been conducted.<\/b> We will publish the service provider, the scope and the date when it has taken place.<\/li>\n<li><b>Application-level encryption of the database is on the roadmap.<\/b> Today, only secrets are encrypted by the application; content is protected by full storage encryption, verified at installation.<\/li>\n<li><b>The second native factor has not yet been delivered.<\/b> It is currently inherited from your identity provider, which covers the need in almost all cases. Integrated two-factor authentication, mandatory for administrators, will follow.<\/li>\n<\/ul>\n<div class=\"note\">If any point on this list is a problem for your organization, please tell us: this is precisely what guides our priorities.<\/div>\n<\/div><\/section>\n\n<section class=\"sec alt\"><div class=\"wrap\">\n<h2>Talking to someone<\/h2>\n<p class=\"lead\">Twenty minutes to examine your context, regulatory constraints, and the appropriate deployment format. Your technical and legal teams are welcome.<\/p>\n<p class=\"body\">A security question, a supplier questionnaire, or a request for documents: <a href=\"mailto:info@wiven.ai\" style=\"color:#2DBE4E\">info@wiven.ai<\/a><\/p>\n<div class=\"ctas\"><a class=\"btn\" href=\"https:\/\/www.wiven.ai\/en\/contact\/\">Talk to us \u2014 20 min \u2192<\/a><a class=\"btn sec2\" href=\"https:\/\/www.wiven.ai\/en\/wiven-llm\/\">Discover WivenLLM<\/a><\/div>\n<\/div><\/section>\n\n<\/div>\n\n<script>\n(function(){\nfunction init(){\nvar root=document.querySelector(\".wsec\"); if(!root){return;}\nif(window.matchMedia&&window.matchMedia(\"(prefers-reduced-motion: reduce)\").matches){return;}\nif(!(\"IntersectionObserver\" in window)){return;}\nvar sel=\".wsec h1,.wsec p.lead,.wsec p.body,.wsec .ctas,.wsec h2,.wsec .card,.wsec ul.list li,.wsec .tablewrap,.wsec .note,.wsec .diag\";\nvar els=Array.prototype.slice.call(document.querySelectorAll(sel));\nif(!els.length){return;}\nels.forEach(function(e){e.classList.add(\"rv\");});\nroot.classList.add(\"anim\");\nvar revealed=0;\nfunction show(el,d){setTimeout(function(){el.classList.add(\"on\");},d);revealed++;}\nvar io=new IntersectionObserver(function(entries){\nentries.forEach(function(en){\nif(!en.isIntersecting){return;}\nvar el=en.target;\nvar idx=el.parentElement?Array.prototype.slice.call(el.parentElement.children).indexOf(el):0;\nshow(el,Math.min(idx,5)*70);\nio.unobserve(el);\n});\n},{rootMargin:\"0px 0px -6% 0px\",threshold:0.05});\nels.forEach(function(e){io.observe(e);});\nsetTimeout(function(){if(revealed===0){els.forEach(function(e){e.classList.add(\"on\");});}},2500);\nwindow.addEventListener(\"pagehide\",function(){els.forEach(function(e){e.classList.add(\"on\");});});\n}\nif(document.readyState===\"loading\"){document.addEventListener(\"DOMContentLoaded\",init);}else{init();}\n})();\n<\/script>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>La s\u00e9curit\u00e9 par l&rsquo;architecture,pas par la promesse WivenLLM s&rsquo;installe sur votre mat\u00e9riel. Vos documents, vos conversations et vos index restent l\u00e0 o\u00f9 vous les avez mis. Cette page d\u00e9crit pr\u00e9cis\u00e9ment ce qui est en place, dans quel p\u00e9rim\u00e8tre, et ce qui reste \u00e0 votre charge. Elle couvre les trois formats de d\u00e9ploiement. Dans le format [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-7149","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>S\u00e9curit\u00e9 de WivenLLM : IA locale et souverainet\u00e9<\/title>\n<meta name=\"description\" content=\"Comment WivenLLM prot\u00e8ge vos donn\u00e9es : traitement sur votre infrastructure, registre de traitement, chiffrement et r\u00e9ponses aux audits s\u00e9curit\u00e9.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wiven.ai\/en\/securite-wivenllm\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"S\u00e9curit\u00e9 de WivenLLM : IA locale et souverainet\u00e9\" \/>\n<meta property=\"og:description\" content=\"Comment WivenLLM prot\u00e8ge vos donn\u00e9es : traitement sur votre infrastructure, registre de traitement, chiffrement et r\u00e9ponses aux audits s\u00e9curit\u00e9.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wiven.ai\/en\/securite-wivenllm\/\" \/>\n<meta property=\"og:site_name\" content=\"Wiven AI\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-13T23:12:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wiven.ai\/wp-content\/uploads\/2026\/08\/wvn-og-wivenllm-securite-v3.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.wiven.ai\/wp-content\/uploads\/2026\/08\/wvn-og-wivenllm-securite-v3.png\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.wiven.ai\\\/securite-wivenllm\\\/\",\"url\":\"https:\\\/\\\/www.wiven.ai\\\/securite-wivenllm\\\/\",\"name\":\"S\u00e9curit\u00e9 de WivenLLM : IA locale et souverainet\u00e9\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.wiven.ai\\\/#website\"},\"datePublished\":\"2026-08-11T10:06:33+00:00\",\"dateModified\":\"2026-08-13T23:12:03+00:00\",\"description\":\"Comment WivenLLM prot\u00e8ge vos donn\u00e9es : traitement sur votre infrastructure, registre de traitement, chiffrement et r\u00e9ponses aux audits s\u00e9curit\u00e9.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.wiven.ai\\\/securite-wivenllm\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.wiven.ai\\\/securite-wivenllm\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.wiven.ai\\\/securite-wivenllm\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.wiven.ai\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"S\u00e9curit\u00e9 WivenLLM\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.wiven.ai\\\/#website\",\"url\":\"https:\\\/\\\/www.wiven.ai\\\/\",\"name\":\"Wiven AI\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.wiven.ai\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"WivenLLM Security: Local AI and Sovereignty","description":"How WivenLLM protects your data: processing on your infrastructure, processing log, encryption and responses to security audits.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wiven.ai\/en\/securite-wivenllm\/","og_locale":"en_US","og_type":"article","og_title":"S\u00e9curit\u00e9 de WivenLLM : IA locale et souverainet\u00e9","og_description":"Comment WivenLLM prot\u00e8ge vos donn\u00e9es : traitement sur votre infrastructure, registre de traitement, chiffrement et r\u00e9ponses aux audits s\u00e9curit\u00e9.","og_url":"https:\/\/www.wiven.ai\/en\/securite-wivenllm\/","og_site_name":"Wiven AI","article_modified_time":"2026-08-13T23:12:03+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.wiven.ai\/wp-content\/uploads\/2026\/08\/wvn-og-wivenllm-securite-v3.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_image":"https:\/\/www.wiven.ai\/wp-content\/uploads\/2026\/08\/wvn-og-wivenllm-securite-v3.png","twitter_misc":{"Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wiven.ai\/securite-wivenllm\/","url":"https:\/\/www.wiven.ai\/securite-wivenllm\/","name":"WivenLLM Security: Local AI and Sovereignty","isPartOf":{"@id":"https:\/\/www.wiven.ai\/#website"},"datePublished":"2026-08-11T10:06:33+00:00","dateModified":"2026-08-13T23:12:03+00:00","description":"How WivenLLM protects your data: processing on your infrastructure, processing log, encryption and responses to security audits.","breadcrumb":{"@id":"https:\/\/www.wiven.ai\/securite-wivenllm\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wiven.ai\/securite-wivenllm\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wiven.ai\/securite-wivenllm\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.wiven.ai\/"},{"@type":"ListItem","position":2,"name":"S\u00e9curit\u00e9 WivenLLM"}]},{"@type":"WebSite","@id":"https:\/\/www.wiven.ai\/#website","url":"https:\/\/www.wiven.ai\/","name":"Wiven AI","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wiven.ai\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.wiven.ai\/en\/wp-json\/wp\/v2\/pages\/7149","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wiven.ai\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.wiven.ai\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.wiven.ai\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wiven.ai\/en\/wp-json\/wp\/v2\/comments?post=7149"}],"version-history":[{"count":5,"href":"https:\/\/www.wiven.ai\/en\/wp-json\/wp\/v2\/pages\/7149\/revisions"}],"predecessor-version":[{"id":7380,"href":"https:\/\/www.wiven.ai\/en\/wp-json\/wp\/v2\/pages\/7149\/revisions\/7380"}],"wp:attachment":[{"href":"https:\/\/www.wiven.ai\/en\/wp-json\/wp\/v2\/media?parent=7149"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}