Where does the model run?

Inside your own environment or in a dedicated environment built for the engagement, with the retrieval index, document store and audit log inside the same boundary.

Can certain jurisdictions be excluded?

Yes. Residency is recorded as a requirement and met by design: placement of compute and storage, routing, and the list of permitted outside services.

What hardware is needed?

It depends on the models and the workload, and is confirmed for the particular environment. Available hardware and hosting are discussed in an enquiry rather than listed as a standard product.

An arrangement where the model runtime, the retrieval index, the document store and the audit log all run inside an environment the organisation controls, with the permitted crossings written down before the first document is indexed.

Can we self-host an LLM?

Yes. Open-weight models run entirely inside your environment. Which models are practical depends on the accelerator memory available and the workload, which we size for the particular environment rather than from a table.

CUSTOM AI / PRIVATE DEPLOYMENT

Your data. Your environment.

Models run inside the client’s environment or a dedicated one, with residency, access and logging decided before the first prompt. Custom AI engagements are contracted with Genyra L.L.C-FZ, the separate Dubai company that operates genyra.ai. Genyra.com describes the practice; the agreement names the company doing the work.

Discuss the work

Illustrative engineering modelLocal / no external action

Request / illustrative workflow

Automate the rule.
Keep the judgement.

Required context is presentA person has authorised the next step

Computed decisionNeeds context

Collect the missing information before proceeding.

01Inside the work

Models run inside the boundary.

The model runtime, the retrieval index, the document store and the audit log run inside the client’s own environment or in a dedicated environment built for the engagement. Questions and documents are not sent to a shared service outside it. The environment can be the organisation’s infrastructure, a private environment we design, or a combination agreed in writing.

The engagement is contracted with Genyra L.L.C-FZ, the Dubai company that operates genyra.ai. Genyra.com describes the practice; the agreement names the entity, the environment and who administers it.

02Inside the work

Residency stated as a design decision.

Where documents may be stored, where processing may happen and which jurisdictions are excluded are recorded as requirements, then met by the design: placement of compute and storage, routing, and the list of permitted outside services, which may be empty. The design is reviewed against those requirements before the system is used.

Matter M-2041 · illustrative · not a customer system

External public networks · shared model services No data leaves

Client environment one boundary · four workloads

Document store matter files · scans · PDFs
Retrieval index this organisation only
Model runtime build 2026.10-03 · no training
Audit log append-only · kept by the client

Boundary drawn · no crossing

Matter M-2041question received

Question · A. Reyes · 11:32

Which clauses limit assignment?

Scope: the three documents filed under M-2041. Processing inside the client environment. No outside service is called.

Retrieved passages3 of 3 · this matter only

[1] MSA-2041.pdf · clause 14.2 Neither party may assign this agreement without the prior written consent of the other.
[2] Schedule-3.pdf · clause 3.5 Consent is not required for an assignment to an affiliate, provided the assignor remains liable.
[3] Amendment-2.pdf · clause 2.1 Clause 14.2 applies to any assignment arising from a change of control.

Draft answermodel 2026.10-03 · for review

Three clauses limit assignment. The agreement may not be assigned without the other party’s written consent [1]; an assignment to an affiliate needs no consent while the assignor remains liable [2]; and the consent requirement applies to an assignment arising from a change of control [3].

[1] MSA-2041.pdf · clause 14.2
[2] Schedule-3.pdf · clause 3.5
[3] Amendment-2.pdf · clause 2.1

Limits. Drawn only from the three documents above. Correspondence and any later amendment outside the matter file were not checked. Whether a change of control has occurred is for the reviewer.

Review and recordreviewer · A. Reyes

Decision · 11:40 ApproveSend back

Audit log · append-only
No.	At	Who	Record
0415	2026-10-14 11:32:04	A. Reyes	question · M-2041
0416	2026-10-14 11:32:05	system	retrieved 3 · MSA-2041, SCH-3, AMD-2
0417	2026-10-14 11:32:09	system	draft · model 2026.10-03
0418	2026-10-14 11:40:51	A. Reyes	approved · docs MSA-2041, SCH-3, AMD-2 · model 2026.10-03

Boundary, retrieval, citation, review. One line in the audit log is what an auditor reads.

03Inside the work

No training on client data.

Client documents, questions and answers are used to retrieve and to answer, and for the organisation’s own evaluation. They are not used to train or fine-tune a model unless the organisation asks for that in writing, and then only inside its boundary. The agreement says so; the design makes it so.

04Inside the work

Access and logging.

Ordinary users, service identities and administrators are separated. Users reach the system through the organisation’s identity service; administrators reach the environment through an audited path, never directly. Every question, the passages retrieved, the answer, the reviewer’s decision and the model version are logged inside the boundary, in a store the organisation controls.

05Inside the work

The boundary is drawn before the first prompt.

The list of components inside the environment, the crossings permitted and the data that may pass each one is written down and agreed before any document is indexed or any question asked. Changes to that list go through the same change control as the system itself.

06A useful next step

Bring the workload and its restrictions.

Tell us the workflow, the documents, the environment it must run in and the rules on residency and access. We will discuss a design, the infrastructure it needs and the operating responsibilities. Available hardware and hosting arrangements are confirmed for the particular environment.

Before an enquiry

Questions we are asked.

Short answers in the same terms as the page. Anything specific to your systems is agreed by enquiry.

Where does the model run?: Inside your own environment or in a dedicated environment built for the engagement, with the retrieval index, document store and audit log inside the same boundary.
Can certain jurisdictions be excluded?: Yes. Residency is recorded as a requirement and met by design: placement of compute and storage, routing, and the list of permitted outside services.
What hardware is needed?: It depends on the models and the workload, and is confirmed for the particular environment. Available hardware and hosting are discussed in an enquiry rather than listed as a standard product.
What is private AI?: An arrangement where the model runtime, the retrieval index, the document store and the audit log all run inside an environment the organisation controls, with the permitted crossings written down before the first document is indexed.
Can we self-host an LLM?: Yes. Open-weight models run entirely inside your environment. Which models are practical depends on the accelerator memory available and the workload, which we size for the particular environment rather than from a table.

A CLEARER NEXT STEP

Plan a private AI deployment

From an unanswered question
to an engineered possibility.

Plan a private AI deployment