Built for organisations that answer to regulators
Your GRC platform holds your most sensitive information. Vigil8 is designed so you can prove it is safe — not just be told so.
Your data, your keys, your AI — in your region
Each customer runs in a dedicated environment in the region they choose, for example the UAE: its own database, file storage, search, backups, encryption keys and AI models.
Nothing shared
No other customer's data is stored or processed in your environment.
AI in region
Models are deployed for you in your hosting region; prompts never train a model.
Recovery in region
Backups and disaster recovery stay inside the same country.
Your data, keys and AI — in your region
Security in every layer
Encrypted twice
Storage encryption by the platform, plus application-level envelope encryption of evidence, credentials, AI records and exports.
Tamper-evident audit trail
Every change is hash-chained with signed anchors in immutable storage — exportable in signed form.
No standing access
Our staff cannot see your data unless you grant time-limited access from inside Vigil8 — and it is recorded.
Least privilege
Roles, groups, data boundaries by business unit, segregation-of-duties rules and access reviews.
Resilient
Zone-redundant hosting, continuous backups and quarterly restore tests that verify the audit trail.
Monitored
Security monitoring of the platform, continuous availability checks and a tested incident response.
Your data comes with you
At any time, and at the end of your subscription, export everything in open formats — and receive a certificate when your environment's keys are destroyed.
Open formats
Records in CSV, XLSX and JSON, files as uploaded, configuration as YAML, the audit trail signed.
Crypto-shredding
Deletion by destroying the encryption keys, so even backups can no longer be read.
Ask us the hard questions
We will walk your security, risk and procurement teams through our architecture, controls and data residency.