Architecture & Security
Guaranteeing full control over your operational data flows through local processing and infrastructure isolation. This sheet describes, in verifiable terms, how Cytria systems handle your data: what is measured on our own infrastructure is stated as such, and what falls under our contractual commitments is worded as a commitment.
Execution Flow & Data Boundary
Processing chain: Local extraction (Qdrant/pgvector) → Local inference (Mistral/Llama) → Human validation queue (review before sending). Your data never leaves the defined perimeter: no cloud LLM call occurs anywhere in the client data path, and no operational data is transmitted to any third-party service.
Verified Posture
The following measures are applied on cytria.com and are verifiable by any reviewer with a plain HTTP or DNS client: HSTS (max-age=31536000, includeSubDomains, preload) · Content-Security-Policy with object-src 'none', base-uri 'self' and form-action 'self' · X-Content-Type-Options: nosniff · Referrer-Policy: strict-origin-when-cross-origin · restrictive Permissions-Policy · Cross-Origin-Opener-Policy: same-origin · DNSSEC enabled · published security.txt · SPF with -all policy · DMARC p=reject · Let's Encrypt certificate · TLS 1.2/1.3 only · probes against /.env and /.git are blocked with no content leak · Swiss hosting (Infomaniak, Geneva).
Deployment Postures
1. Client On-Premise (Existing Hardware)
For SMEs that already operate infrastructure capable of hosting the models locally.
2. Client On-Premise (Acquired Hardware)
For SMEs wanting a fully local perimeter on dedicated hardware, sized and installed by Cytria.
RTX 4000-class: small teams, single workflow · RTX 6000-class / DGX: larger teams, concurrent systems.
3. Dedicated Swiss Hosting
For SMEs preferring isolated infrastructure in Switzerland, with no sharing of their data. Environment set up on Infomaniak's servers, an independent Swiss hosting provider with public environmental commitments.
Security Control Measures
| Control Domain | Cytria Specifications & Protocols |
|---|---|
| Access Rights & SSO | OpenID Connect / LDAP, granular roles, folder isolation. |
| Logging & Audit | Full local logging, 90-day retention. |
| Human Validation | No autonomous write or send actions; all drafts are submitted for human validation. |
| Backup Policy | Daily AES-256 encrypted backups, retained for 30 days, restoration tested every quarter. |
| Updates & Patches | Monthly maintenance window, critical patches applied within 72 hours, no silent model changes. |
| Sub-processors | On-premises: no subcontractor has access to the data. Hosted deployments: Infomaniak only. |
Continuous Monitoring
Automated gates run permanently on the site's publishing pipeline: link integrity, TLS configuration, security-header consistency, DNS/CAA, performance budget, and contrast/accessibility. Any detected drift triggers a fix before publication.