Security

All data is scoped to a tenant at the API layer; cross-tenant access is structurally impossible through the query path, not merely forbidden by policy.

Within a tenant, labeled memory is walled by clearances, classification levels, ownership, and conflict-of-interest checks. Grants and revocations are ledger entries that take effect on the next request.

Every gated read is recorded in an append-only audit log: who asked, what was returned, and under which authority. Agent actions and permission escalations are audited the same way.

Audit records are never rewritten; corrections are recorded as new entries.

All traffic is encrypted in transit with TLS. Our cloud infrastructure is hosted in the European Union.

For organizations with stricter requirements, Yohanun can be self-hosted entirely on your own infrastructure — your network, your disks, your keys. See deployment options.

API access is authenticated with scoped API keys that can be rotated and revoked. Provider API keys you bring (OpenAI, Anthropic, etc.) are stored for your tenant only and never shared across tenants.

If a breach affecting personal data occurs, we will notify affected customers and the supervisory authority within 72 hours, as required by GDPR.

Yohanun is operated by GestureLoop Ltd., an Irish company, and is subject to GDPR and the Irish Data Protection Act. Data Processing Agreements are available for customers who require them.

We don't lead with certification badges. A certification attests that a process was followed, on a sampled basis, once a year; our enforcement is deterministic and self-evidencing on every request — access decided by the platform before generation, a per-read audit ledger, and full self-hosting. That's a stronger claim than a badge, and we invite your security team to challenge it directly: we'll walk through the architecture, the ledgers, and live enforcement in as much depth as they want.