---
title: "Security & trust — Aventail™"
url: https://aventail.co.uk/security
description: "SOC 2 Type II, where your data goes and how Aventail™ Link applies policy to inference. Request the report and review security documents."
lang: en-GB
---

Skip to content

Locai is now Aventail™ Learn about the rebrand: https://aventail.co.uk/newsroom/locai-rebrands-as-aventail

# Security & trust

What security reviewers need to assess Aventail™: our SOC 2 Type II status, where data goes, how policy governs inference, and the documents behind it.

Request the SOC 2 report (opens trust centre in a new tab): https://trust.inc/loc-ai-ltd

Image: SOC 2 Type II (https://aventail.co.uk/__l5e/assets-v1/4068675e-77c8-42d8-b930-10cb6b9cb886/soc2-type2-compai.svg)

**SOC 2 Type II**

## SOC 2 Type II

Aventail™ has achieved SOC 2 Type II.

Request the SOC 2 Type II report and supporting security information through our trust centre. Requests are reviewed there; access is not automatic.

Request access in the trust centre (opens in a new tab): https://trust.inc/loc-ai-ltd

## Where your data goes

Inference routed through Aventail™ Link follows the destination your policy permits.

| Destination | What it receives |
| --- | --- |
| Local execution | With supported local execution, inference stays on the machine running Aventail™ Link. |
| Approved remote destination | A permitted peer, server or external provider receives the request sent to it. External providers process it through your organisation’s own account. |
| Hosted Aventail™ Control | Management, device and routing events, not prompt or response bodies. Aventail™ Control can also be hosted on your own infrastructure. |

Application storage, plugins and analytics are separate considerations. Review them alongside inference routing; this does not mean all data stays on the device.

## How policy governs inference

Aventail™ Control configures and distributes policies ahead of requests. Aventail™ Link evaluates them locally for each request, covering approved models, destinations, geography and fallback. Hosted Aventail™ Control stays outside the inference request path.

If no destination is permitted, the request returns an error and no model runs it.

These restrictions apply to requests routed through Aventail™, not to unrelated tools.

See how it works: https://aventail.co.uk/how-it-works

Verify the data boundary: https://aventail.co.uk/guides/ai-data-residency

Route between local models and approved cloud APIs: https://aventail.co.uk/guides/route-local-models-and-cloud-apis

## Review the documents

- Trust centre SOC 2 Type II report requests and security information (opens in a new tab): https://trust.inc/loc-ai-ltd
- Data Processing Agreement Terms for personal data we process for you: https://aventail.co.uk/dpa
- Privacy Policy How we handle personal data: https://aventail.co.uk/privacy
- Security documentation Product security guidance (opens in a new tab): https://docs.aventail.co.uk/docs/guides/security
- Platform architecture How the components fit together (opens in a new tab): https://docs.aventail.co.uk/docs/introduction/platform-architecture

## Talk to us about a security review

Bring your questionnaire, deployment requirements and questions to a conversation with our team.

Contact us: https://aventail.co.uk/contact

We use optional cookies and tracking to identify visiting companies, load our contact form, measure Google Ads download clicks and understand use of our private AI page with PostHog. Cookie policy (https://aventail.co.uk/cookies)

## Structured data

```json
{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@type": "Organization",
      "@id": "https://aventail.co.uk/#organization",
      "name": "Aventail",
      "alternateName": "Locai",
      "legalName": "Loc.ai Ltd",
      "description": "Aventail, formerly Locai, was founded in 2026 and is a graduate of Google AI First. It gives enterprises the full AI stack to adopt AI securely: a built-in inference engine, deployment of supported models across approved hardware, on-device classification and policy-based routing between those machines and approved external AI providers, central management and an employee workspace. Organisations use Aventail to put approved information to work while controlling where inference requests run.",
      "url": "https://aventail.co.uk/",
      "logo": "https://aventail.co.uk/apple-touch-icon.png",
      "email": "hello@aventail.co.uk"
    },
    {
      "@type": "WebPage",
      "@id": "https://aventail.co.uk/security#page",
      "url": "https://aventail.co.uk/security",
      "name": "Security & trust — Aventail™",
      "description": "SOC 2 Type II, where your data goes and how Aventail™ Link applies policy to inference. Request the report and review security documents.",
      "publisher": {
        "@id": "https://aventail.co.uk/#organization"
      }
    }
  ]
}
```