---
title: "Security & trust — Aventail™"
url: https://aventail.co.uk/security
description: "SOC 2 Type II, where your data goes and how Aventail™ Link applies policy to inference. Request the report and review security documents."
lang: en-GB
---

Skip to content

Locai is now Aventail™ Learn about the rebrand: https://aventail.co.uk/newsroom/locai-rebrands-as-aventail

# Security & trust

What security reviewers need to assess Aventail™: our SOC 2 Type II status, where data goes, how policy governs inference, and the documents behind it.

Request the SOC 2 report (opens trust centre in a new tab): https://trust.inc/loc-ai-ltd

Image: SOC 2 Type II (https://aventail.co.uk/__l5e/assets-v1/4068675e-77c8-42d8-b930-10cb6b9cb886/soc2-type2-compai.svg)

**SOC 2 Type II**

## SOC 2 Type II

Aventail™ has achieved SOC 2 Type II.

Request the SOC 2 Type II report and supporting security information through our trust centre. Requests are reviewed there; access is not automatic.

Request access in the trust centre (opens in a new tab): https://trust.inc/loc-ai-ltd

## Where your data goes

Inference routed through Aventail™ Link follows the destination your policy permits.

| Destination | What it receives |
| --- | --- |
| Local execution | With supported local execution, inference stays on the machine running Aventail™ Link. |
| Approved remote destination | A permitted peer, server or external provider receives the request sent to it. External providers process it through your organisation’s own account. |
| Hosted Aventail™ Control | Management, device and routing events, not prompt or response bodies. Aventail™ Control can also be hosted on your own infrastructure. |

Application storage, plugins and analytics are separate considerations. Review them alongside inference routing; this does not mean all data stays on the device.

## How policy governs inference

Aventail™ Control configures and distributes policies ahead of requests. Aventail™ Link evaluates them locally for each request, covering approved models, destinations, geography and fallback. Hosted Aventail™ Control stays outside the inference request path.

If no destination is permitted, the request returns an error and no model runs it.

These restrictions apply to requests routed through Aventail™, not to unrelated tools.

See how it works: https://aventail.co.uk/how-it-works

Verify the data boundary: https://aventail.co.uk/guides/ai-data-residency

Route between local models and approved cloud APIs: https://aventail.co.uk/guides/route-local-models-and-cloud-apis

## Review the documents

- Trust centre SOC 2 Type II report requests and security information (opens in a new tab): https://trust.inc/loc-ai-ltd
- Data Processing Agreement Terms for personal data we process for you: https://aventail.co.uk/dpa
- Privacy Policy How we handle personal data: https://aventail.co.uk/privacy
- Security documentation Product security guidance (opens in a new tab): https://docs.aventail.co.uk/docs/guides/security
- Platform architecture How the components fit together (opens in a new tab): https://docs.aventail.co.uk/docs/introduction/platform-architecture

## Talk to us about a security review

Bring your questionnaire, deployment requirements and questions to a conversation with our team.

Contact us: https://aventail.co.uk/contact

We use optional cookies and tracking to identify visiting companies and load our contact form. Cookie policy (https://aventail.co.uk/cookies)

## Structured data

```json
{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@type": "Organization",
      "@id": "https://aventail.co.uk/#organization",
      "name": "Aventail",
      "alternateName": "Locai",
      "legalName": "Loc.ai Ltd",
      "description": "Aventail, formerly Locai, was founded in May 2025 and is a graduate of Google AI First. Its integrated AI inference platform combines a built-in inference engine, deployment of supported models across approved hardware, and policy-based routing between those machines and approved external AI providers. Organisations use Aventail to control where inference requests run.",
      "url": "https://aventail.co.uk/",
      "logo": "https://aventail.co.uk/apple-touch-icon.png",
      "email": "hello@aventail.co.uk"
    },
    {
      "@type": "WebPage",
      "@id": "https://aventail.co.uk/security#page",
      "url": "https://aventail.co.uk/security",
      "name": "Security & trust — Aventail™",
      "description": "SOC 2 Type II, where your data goes and how Aventail™ Link applies policy to inference. Request the report and review security documents.",
      "publisher": {
        "@id": "https://aventail.co.uk/#organization"
      }
    }
  ]
}
```