{"id":7481,"date":"2026-08-19T19:10:09","date_gmt":"2026-08-19T19:10:09","guid":{"rendered":"https:\/\/www.wiven.ai\/wiven-llm\/docs\/administration\/securite\/"},"modified":"2026-08-19T19:10:09","modified_gmt":"2026-08-19T19:10:09","slug":"securite","status":"publish","type":"wvn_doc","link":"https:\/\/www.wiven.ai\/en\/wiven-llm\/docs\/administration\/securite\/","title":{"rendered":"Security and confidentiality"},"content":{"rendered":"<h1>Security and confidentiality<\/h1>\n<hr \/>\n<h2>The principle<\/h2>\n<p>In a fully local configuration, <strong>nothing comes out<\/strong> documents, index,<br \/>\nConversations, models, and the database remain on your infrastructure.<\/p>\n<p>Each data output results from a <strong>explicit choice<\/strong> from an administrator \u2014<br \/>\nconnect an external provider, a hosted database, a search engine.<br \/>\nThe screen <code>Settings \u2192 Privacy<\/code> summarizes the actual state of your instance.<\/p>\n<hr \/>\n<h2>Where the data goes, component by component<\/h2>\n<table>\n<thead>\n<tr>\n<th>Component<\/th>\n<th>In local configuration<\/th>\n<th>In external configuration<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Language model<\/td>\n<td>Nothing comes out<\/td>\n<td>Messages + documentary context<\/td>\n<\/tr>\n<tr>\n<td>Embeddings engine<\/td>\n<td>Nothing comes out<\/td>\n<td>Text of documents and questions<\/td>\n<\/tr>\n<tr>\n<td>Vector base<\/td>\n<td>Nothing comes out<\/td>\n<td>Vectors and metadata<\/td>\n<\/tr>\n<tr>\n<td>Audio transcript<\/td>\n<td>Nothing comes out<\/td>\n<td>The audio file<\/td>\n<\/tr>\n<tr>\n<td>Text-to-speech<\/td>\n<td>Nothing comes out<\/td>\n<td>The text of the answers<\/td>\n<\/tr>\n<tr>\n<td>Image generation<\/td>\n<td>Nothing comes out<\/td>\n<td>The description<\/td>\n<\/tr>\n<tr>\n<td>Web search (agent)<\/td>\n<td>Not applicable<\/td>\n<td>The request<\/td>\n<\/tr>\n<tr>\n<td>URL import<\/td>\n<td>Not applicable<\/td>\n<td>Request to the requested address<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>The most frequently overlooked point:<\/strong> The embeddings engine. A local model<br \/>\nassociated with an external embeddings engine exposes <strong>the entire corpus<\/strong> to this<br \/>\nservice provider, for indexing. The choice of embedding engine deserves just as much attention.<br \/>\nattention than that of the model.<\/p>\n<hr \/>\n<h2>Protect the instance<\/h2>\n<h3>Installation secrets<\/h3>\n<p>Three secrets must be long, random, and specific to your setup:<br \/>\nthe session signing key, as well as the signing key and salt<br \/>\ninternal. <strong>Never reuse example values<\/strong> They are public.<\/p>\n<h3>Transport encryption<\/h3>\n<p>Place a reverse proxy providing TLS in front of the service, or enable HTTPS.<br \/>\ndirectly with your certificates. Without this, identifiers and content circulate<br \/>\nclearly on the network.<\/p>\n<h3>Network Exposure<\/h3>\n<p>An internal instance does not need to be accessible from the internet. Restrict<br \/>\naccess to the organization&#039;s network, or use controlled remote access.<\/p>\n<h3>Accounts and roles<\/h3>\n<p>Limit the number of administrators, and favor invitations over account creation.<br \/>\nFor passwords, suspend them rather than delete them, and keep them safe. <strong>at least one<br \/>\nlocal administrator account<\/strong> even with single sign-on.<br \/>\n\u2192 <a href=\"\/en\/wiven-llm\/docs\/administration\/utilisateurs\/\">Users and roles<\/a><\/p>\n<h3>API keys<\/h3>\n<p>Each API key grants full programmatic access. Create one per<br \/>\nintegration, revoke those that are no longer useful, and do not distribute them in the<br \/>\nshared code.<br \/>\n\u2192 <a href=\"\/en\/wiven-llm\/docs\/integrations\/api\/\">API developer<\/a><\/p>\n<hr \/>\n<h2>What is stored, and where<\/h2>\n<p>Everything fits into one <strong>single storage directory<\/strong> :<\/p>\n<ul>\n<li>the application&#039;s database \u2014 users, spaces, conversations,<br \/>\n  settings; ;<\/li>\n<li>the extracted documents; ;<\/li>\n<li>vector indices, if the basis is local; ;<\/li>\n<li>the downloaded models; ;<\/li>\n<li>the files produced by the agents.<\/li>\n<\/ul>\n<p><strong>Passwords<\/strong> are never stored in plain text. <strong>The API keys of<br \/>\nsuppliers<\/strong> are protected and never redisplayed after recording.<\/p>\n<hr \/>\n<h2>Backup and restore<\/h2>\n<p><strong>Save this:<\/strong> the storage directory and the configuration file.<br \/>\nNothing else is needed \u2014 the application itself reinstalls.<\/p>\n<p><strong>Recommendations:<\/strong><br \/>\n\u2013 Back up cold, or by ensuring the consistency of the database.<br \/>\n\u2013 <strong>Try a restore.<\/strong> A backup that is never restored is not a<br \/>\n  backup.<br \/>\n\u2013 Encrypt your backups: they contain all your documents and<br \/>\n  conversations.<br \/>\n\u2013 Back up your data before each update.<\/p>\n<hr \/>\n<h2>Traceability<\/h2>\n<p>THE <strong>event log<\/strong> retains the structuring actions: connections,<br \/>\naccount creation and deletion, space modifications, imports of<br \/>\ndocuments, API key creation, SSO connections.<br \/>\n\u2192 <a href=\"\/en\/wiven-llm\/docs\/administration\/journaux\/\">Journals and supervision<\/a><\/p>\n<p>An administrator can also view and export the history of<br \/>\nconversations. <strong>Inform the users<\/strong> : it is a requirement of<br \/>\ntransparency, and often an obligation.<\/p>\n<hr \/>\n<h2>Data erasure<\/h2>\n<table>\n<thead>\n<tr>\n<th>Element<\/th>\n<th>Erasure<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Conversation<\/td>\n<td>Thread removal<\/td>\n<\/tr>\n<tr>\n<td>Documents from a space<\/td>\n<td>Removing the space, or resetting the index<\/td>\n<\/tr>\n<tr>\n<td>Full document<\/td>\n<td>Removal from library \u2014 removed from all spaces<\/td>\n<\/tr>\n<tr>\n<td>Memoirs<\/td>\n<td>Individual or global deletion by the user<\/td>\n<\/tr>\n<tr>\n<td>Second Brain Notes<\/td>\n<td>Individual deletion by the user<\/td>\n<\/tr>\n<tr>\n<td>Account<\/td>\n<td>Removal or suspension<\/td>\n<\/tr>\n<tr>\n<td>Event log<\/td>\n<td>Purge by an administrator<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>For a data protection erasure request, the entire<br \/>\nThese elements must be reviewed.<\/p>\n<hr \/>\n<h2>Telemetry<\/h2>\n<p>The application may transmit anonymous usage statistics intended for<br \/>\nto guide development. No document content, conversation, or anything else.<br \/>\nIdentifying data is not part of it.<\/p>\n<p>It deactivates completely in <code>Settings \u2192 Privacy<\/code>, or by<br \/>\nconfiguration at deployment. On an installation requiring sovereignty,<br \/>\nDisable it explicitly and document it.<\/p>\n<hr \/>\n<h2>Points to be aware of<\/h2>\n<p><strong>Browser voice recognition<\/strong> usually transmits audio to<br \/>\nbrowser publisher servers. This is an independent data output from<br \/>\nthe WivenLLM configuration.<\/p>\n<p><strong>Remote MCP servers<\/strong> They receive what the agent transmits to them. Don&#039;t<br \/>\nConnect only with trust. \u2192 <a href=\"\/en\/wiven-llm\/docs\/agents\/mcp\/\">MCP Servers<\/a><\/p>\n<p><strong>The agent&#039;s skills actually make a difference.<\/strong> A writing skill of<br \/>\nFiles are written, and a web search skill issues queries. Activate at<br \/>\nminimum required, space by space.<\/p>\n<p><strong>The web widget is public.<\/strong> The space to which it is connected must contain only<br \/>\ndisseminable information, and the list of authorized domains must be<br \/>\ninformed. \u2192 <a href=\"\/en\/wiven-llm\/docs\/integrations\/widget\/\">Web widget<\/a><\/p>\n<p><strong>A model can be wrong.<\/strong> Citing sources allows the<br \/>\nverification; they do not replace it. For any binding use, a<br \/>\nHuman review remains necessary.<\/p>\n<hr \/>\n<h2>Compliance<\/h2>\n<p>WivenLLM provides the <strong>technical means<\/strong> \u2014 location of treatments,<br \/>\nCompartmentalization, roles, logging, erasure. Conformity itself<br \/>\n(nLPD, GDPR, sector-specific requirements) depends on your configuration and your<br \/>\nprocedures.<\/p>\n<p>The elements to document in your register:<\/p>\n<ul>\n<li>where the processing takes place, and which subcontractors are involved in the case<br \/>\n  if applicable; ;<\/li>\n<li>which categories of data are indexed; ;<\/li>\n<li>who has access to what; ;<\/li>\n<li>retention periods and deletion procedures; ;<\/li>\n<li>the information given to users.<\/li>\n<\/ul>","protected":false},"parent":7451,"menu_order":506,"template":"","meta":[],"class_list":["post-7481","wvn_doc","type-wvn_doc","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>S\u00e9curit\u00e9 et confidentialit\u00e9 \u2014 Documentation WivenLLM<\/title>\n<meta name=\"description\" content=\"Ce qui reste chez vous, ce qui peut en sortir, comment prot\u00e9ger l&#039;instance et quoi sauvegarder.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wiven.ai\/en\/wiven-llm\/docs\/administration\/securite\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"S\u00e9curit\u00e9 et confidentialit\u00e9 \u2014 Documentation WivenLLM\" \/>\n<meta property=\"og:description\" content=\"Ce qui reste chez vous, ce qui peut en sortir, comment prot\u00e9ger l&#039;instance et quoi sauvegarder.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wiven.ai\/en\/wiven-llm\/docs\/administration\/securite\/\" \/>\n<meta property=\"og:site_name\" content=\"Wiven AI\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.wiven.ai\\\/wiven-llm\\\/docs\\\/administration\\\/securite\\\/\",\"url\":\"https:\\\/\\\/www.wiven.ai\\\/wiven-llm\\\/docs\\\/administration\\\/securite\\\/\",\"name\":\"S\u00e9curit\u00e9 et confidentialit\u00e9 \u2014 Documentation WivenLLM\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.wiven.ai\\\/#website\"},\"datePublished\":\"2026-08-19T19:10:09+00:00\",\"description\":\"Ce qui reste chez vous, ce qui peut en sortir, comment prot\u00e9ger l'instance et quoi sauvegarder.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.wiven.ai\\\/wiven-llm\\\/docs\\\/administration\\\/securite\\\/#breadcrumb\"},\"inLanguage\":\"en\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.wiven.ai\\\/wiven-llm\\\/docs\\\/administration\\\/securite\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.wiven.ai\\\/wiven-llm\\\/docs\\\/administration\\\/securite\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.wiven.ai\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Documentation\",\"item\":\"https:\\\/\\\/www.wiven.ai\\\/wiven-llm\\\/docs\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Administration\",\"item\":\"https:\\\/\\\/www.wiven.ai\\\/wiven-llm\\\/docs\\\/administration\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"S\u00e9curit\u00e9 et confidentialit\u00e9\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.wiven.ai\\\/#website\",\"url\":\"https:\\\/\\\/www.wiven.ai\\\/\",\"name\":\"Wiven AI\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.wiven.ai\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security and privacy \u2014 WivenLLM documentation","description":"What stays with you, what can leave, how to protect the instance and what to back up.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wiven.ai\/en\/wiven-llm\/docs\/administration\/securite\/","og_locale":"en_US","og_type":"article","og_title":"S\u00e9curit\u00e9 et confidentialit\u00e9 \u2014 Documentation WivenLLM","og_description":"Ce qui reste chez vous, ce qui peut en sortir, comment prot\u00e9ger l'instance et quoi sauvegarder.","og_url":"https:\/\/www.wiven.ai\/en\/wiven-llm\/docs\/administration\/securite\/","og_site_name":"Wiven AI","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wiven.ai\/wiven-llm\/docs\/administration\/securite\/","url":"https:\/\/www.wiven.ai\/wiven-llm\/docs\/administration\/securite\/","name":"Security and privacy \u2014 WivenLLM documentation","isPartOf":{"@id":"https:\/\/www.wiven.ai\/#website"},"datePublished":"2026-08-19T19:10:09+00:00","description":"What stays with you, what can leave, how to protect the instance and what to back up.","breadcrumb":{"@id":"https:\/\/www.wiven.ai\/wiven-llm\/docs\/administration\/securite\/#breadcrumb"},"inLanguage":"en","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wiven.ai\/wiven-llm\/docs\/administration\/securite\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wiven.ai\/wiven-llm\/docs\/administration\/securite\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.wiven.ai\/"},{"@type":"ListItem","position":2,"name":"Documentation","item":"https:\/\/www.wiven.ai\/wiven-llm\/docs\/"},{"@type":"ListItem","position":3,"name":"Administration","item":"https:\/\/www.wiven.ai\/wiven-llm\/docs\/administration\/"},{"@type":"ListItem","position":4,"name":"S\u00e9curit\u00e9 et confidentialit\u00e9"}]},{"@type":"WebSite","@id":"https:\/\/www.wiven.ai\/#website","url":"https:\/\/www.wiven.ai\/","name":"Wiven AI","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wiven.ai\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en"}]}},"_links":{"self":[{"href":"https:\/\/www.wiven.ai\/en\/wp-json\/wp\/v2\/wvn_doc\/7481","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wiven.ai\/en\/wp-json\/wp\/v2\/wvn_doc"}],"about":[{"href":"https:\/\/www.wiven.ai\/en\/wp-json\/wp\/v2\/types\/wvn_doc"}],"up":[{"embeddable":true,"href":"https:\/\/www.wiven.ai\/en\/wp-json\/wp\/v2\/wvn_doc\/7451"}],"wp:attachment":[{"href":"https:\/\/www.wiven.ai\/en\/wp-json\/wp\/v2\/media?parent=7481"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}