Your AI runs where your data lives.
Most “AI platforms” are a thin wrapper that ships your prompts and your customers' data to someone else's servers. Ektasi's AI suite can run entirely on infrastructure you own, in India — so intelligence never costs you sovereignty.
DPDP changes the default answer to “where does the data go?”
India's Digital Personal Data Protection Act moves enforcement forward, and the penalties for mishandling personal data are steep. When a regulator asks where your customers' data — and the AI processing it — physically sits, “a US cloud AI vendor” is an expensive answer.
Ektasi's architecture makes the compliant path the default: keep the data in India, keep the AI on your own server, and keep an immutable record of every access. You are not bolting compliance on afterwards — it is how the platform is built.
Fully self-hosted
Point the platform at an OpenAI-compatible endpoint you run yourself — Ollama, vLLM, or any compatible gateway on your own hardware.
Prompts and data never leave your network.Bring your own key (BYOK)
Use your own OpenAI, Anthropic, Google Gemini, or OpenRouter keys, encrypted per tenant, with automatic failover between providers.
You control the vendor relationship and the spend.Hybrid routing
Route cheap text tasks to a platform model and sensitive workloads to your self-hosted endpoint — per feature, per tenant.
Cost where it is fine, sovereignty where it matters.The platform speaks an OpenAI-compatible protocol, so new providers and self-hosted engines slot in without changing your workflows.
Data residency you control
Self-host on infrastructure located in India and personal data stays in the country. On our hosted service our application and database servers are in India, but some sub-processors, including the AI model providers, operate outside India - see the sub-processor list.
Per-tenant AES vault
Provider keys and other stored credentials are encrypted with AES-256-GCM using per-tenant, HKDF-derived keys — never stored in plaintext.
Row-level tenant isolation
PostgreSQL row-level security means a query scoped to one tenant cannot return another tenant’s data.
Append-only audit ledger
Key administrative actions are written to a database-enforced, append-only audit trail.
No forced data sharing
Point the platform at a self-hosted model and prompts, documents, and outputs are not sent to a third-party AI vendor. On the hosted service, prompts go to the AI providers on the sub-processor list - Ektasi’s own model server, Azure OpenAI and Anthropic.
Tenant erasure
Decommissioning a tenant deletes every table that carries its identifier from the live database, in one transaction, and destroys its per-tenant salt. Two records are kept for eight financial years because tax and company law require them (CGST Act s.36; Companies Act, 2013 s.128(5), permitted by DPDP Act s.8(7)): the GST tax invoices we issued, and the record of the acceptance behind each charge. Copies in backups expire on the deployment’s retention schedule.
A full AI-native business platform your compliance team can actually sign off on — because the data, and the model, stay under your control.