Your country
Faheem Private Cloud
Data never leaves the country.
Dedicated servers in your country, managed by Netveva. Same platform, no hardware to run. For organisations without a server room, including smaller companies.
Faheem Sovereign
Data never leaves your building.
The whole Faheem platform on servers you own, inside your walls. No cloud AI calls, nothing sent out, and every key handed to you.
For ministries, banks and anyone whose data must never leave.
Your building
Your hardware. Your keys. Your building.
One installation, inside your own walls. We buy the hardware for you or you use your own. Netveva installs the whole platform, then hands everything over.
- Runs entirely on servers inside your building, bought by us for you or already yours.
- With outside tools switched off, nothing you type, store or create ever leaves. Switch one on and every call is masked and recorded.
- Nothing reports back to us and there is no remote access. The only thing that goes out is a monthly licence check, and it carries no data.
- Full handover: every key, credential and admin account ends up with your team.
- We access your servers only for maintenance, and only with your prior approval.
Everything Faheem can do, with the strongest boundary around it.
The same platform as every Faheem, on your own hardware.
Always-On Agents
Hand over the month-end report or the supplier comparison in the evening. It is worked, checked and waiting for you in the morning. Anything unsure comes to your phone with full context.
Black Box
A tamper-evident record of everything the AI did: every question, every file it touched, everything it sent. Change one character and the record shows it.
GCC Compliance, Live
Your data privacy controls scored against all six Gulf states, from how the system is actually set up. One click exports a Sovereign Report PDF, offline.
Sovereign Knowledge Base
Your documents indexed locally with cited sources. PDF, Word, Excel and PowerPoint, in Arabic and English, uploaded nowhere.
Arabic & English
Works in whichever language you write, with proper right-to-left documents. A board paper in Arabic and a supplier letter in English, from the same documents, on your hardware.
Secrets Vault
Passwords and keys stay in a vault on your hardware. The AI uses them without ever seeing them.
For institutions that cannot leak.
Faheem Sovereign exists for organisations where a foreign cloud is not a policy question but a hard no. If your data could not survive a leak, this is the one for you.
- Ministries, regulators and government entities
- Central banks, sovereign wealth funds and financial institutions
- Defence and national security organisations
- Hospitals, clinics and healthcare groups
- Law firms and advisors bound by client confidentiality
- Telecoms, energy and critical infrastructure operators
- Family offices and holding groups
- Any enterprise with data it would never hand to a foreign cloud
Real engineering, not slideware.
The same parts in every Faheem, with the line drawn at your building. The models are chosen at installation to fit your hardware and your country's rules.
- AI models
- Open models, or Faheem versions tuned for your field, running on your hardware.
- Knowledge base
- Your documents, indexed on your hardware, every answer with its source.
- Black box
- A tamper-evident record of every action, checked in one click.
- GCC compliance
- Scored live against all six Gulf states, with a Sovereign Report PDF.
- Connectors
- Microsoft 365, Teams, SharePoint, Jira and more. New ones can be added.
- Secrets vault
- Passwords and keys the AI can use but never see.
- Approval gates
- Risky actions wait for a person to say yes.
- Sign-in
- Passkeys, single sign-on and two-factor. Sensitive actions ask you to sign in again.
- Screened at the door
- Every upload is scanned for viruses and given a confidentiality level on arrival.
- A checked install
- Every part of the install is pinned and checked, so nothing unexpected gets in.
- Tested by attackers
- Rounds of internal security testing, with every finding fixed.
- Right to be forgotten
- A person's data can be erased on request, and the audit record still checks out.
The same Faheem. Two other places to draw the line.
Sovereign is the flagship: maximum control, on your premises. If you need residency without running hardware, or public models behind a masking gate, the other two are built from the same system.
Your organisationPersonal data maskedPublic AI model
Faheem Shield
Private data is never seen by cloud AI.
A local gateway masks personal data before it reaches a public model, restores it on the way back and refuses to send when unsure. For teams that want big models without exposure.
Faheem Sovereign, in plain terms.
Does any data leave the building?
No. With external tools switched off, nothing you type, store or generate leaves your walls: the models, your documents, every conversation and the audit chain all stay on your hardware. Two connections exist and neither carries data: push notifications, encrypted end to end to each phone, and a monthly licence check. If you later switch on an outside tool, every call is masked and recorded, and you can switch it off again.
What does the licence check send?
A licence id, a fingerprint of the hardware it is installed on and a signature, roughly once a month. It never carries your documents, prompts, answers or usage. If the check cannot reach us, Faheem keeps serving for a two-week grace period and then pauses; nothing is deleted, and it resumes the moment the licence is confirmed again.
Where do the models run?
On your hardware, inside your building. The models are chosen at installation, capable open models or Faheem versions tuned for your field, and they run on your machines. No outside AI is involved anywhere.
How do updates work without connectivity?
Nothing updates itself, nothing reports back and there is no remote access, so nothing changes unless you decide it should. Updates arrive as packages and are applied by your team, or by Netveva on site, on your schedule and with your prior approval. The monthly licence check is the only connection Faheem makes on its own, and it carries no data.
Who holds the keys?
You do. Handover includes every key, credential and admin account. Credentials live in a local vault and are injected by reference, so even the model never sees raw values.
How is the audit actually proven?
Everything the AI does is written to the black box, a record where each entry is locked to the one before it. A check reads the whole record and points to the exact entry if anything was edited, deleted or removed. You can run the check yourself, any time, offline.
What hardware do we need?
A GPU server class machine. We can buy it for you, or you can use your own. Faheem sizes itself to the graphics cards installed, from data-centre cards to workstation ones, and the exact size depends on the models and the work you choose. We scope it with you during discovery, before any commitment.
Maximum sovereignty. See it proven.
Book a live demo. We will show you Faheem Sovereign working real tasks with nothing leaving the building and the audit chain verifying in front of you.