# For your IT: where the AI runs, who holds the keys · Fornace

> Where Fornace's AI runs, how people sign in, how permissions, secrets and custody work, which documents exist and how you leave. Written for your CIO.

# For your IT.

Someone in marketing sent you this. Here is what you will want to know before you say yes.

```kv
where it runs     at your premises · in approved European data centres · on Mac laptops from a shop
custody           training data and inference in a chain of custody signed with you, beyond what EU rules require
sign-in           company accounts (Microsoft Entra, Google Workspace) · passkeys
permissions       denied by default, granted per role, every action in a log nobody can edit
secrets           held by Matchbox, never by people, apps or agents
models            Scintilla starts from MiniCPM5, Eugeny from Qwen3.8 · training, compression and runtimes are ours
other providers   only if you enable them, behind the same door and the same log
AI Act            roles and obligations written down per system, before we build
documents         DPA and sub-processor list signed before deployment
exit              models, data and code are yours to keep
contact           info@fornacestudio.com
```

[[Ask an engineer|mailto:info@fornacestudio.com]]