Remains within the customer environment
User and company content
- Prompts and user questions
- Generated answers
- Uploaded document content
- Private workspace conversations
Security overview
Secure AI for business: how your data stays on your network
LionBox is built as secure AI for business: inference runs on the appliance in your office, and optional external data flows only happen when your administrator enables them. Processing data locally makes GDPR-compliant use of AI easier, but your organisation remains responsible for how it processes personal data. The sections below show exactly what stays on the box and what does not.
Default security posture
Inference locationOn appliance
Outbound appliance accessOff
Internet searchOff by default
Update initiationAdministrator
01
System boundary and request path
Normal AI use requires an authorized browser, the office network and LionBox. External inference is not part of this path.
Normal inference path
Local Browser
Authorized user
Private LAN
Ethernet or Wi-Fi
LionBox
Local GPU inference
The internet gateway can be disconnected while this path remains available.
Boundary statement
- Processing
- The AI model runs on the appliance GPU.
- Address
- Authorized users access the workspace at lionbox.local.
- External API
- No external inference API is required for normal operation.
- Internet
- Local chat and indexed knowledge remain available offline.
| Path | Data | Transport | Default |
|---|---|---|---|
| Browser → LionBox | Prompts, attachments and responses | Private office LAN | Active |
| LionBox → external AI API | No inference traffic | Not required | Disabled |
| Admin phone → LionBox | Authorized software and model bundles only | Local Wi‑Fi transfer | Admin initiated |
| LionBox → internet search | Search text only, when enabled | Controlled exception | Off |
02
Control matrix
Implemented architectural decisions are separated from launch controls that remain under definition.
Control areaCurrent designStatus
Network
Normal inference remains on the office network. The appliance does not require a public inference endpoint.
Defined
Identity
The owner pairs the appliance, creates users and assigns access to approved knowledge spaces.
Defined
Workspace isolation
User requests remain separated. Administrators manage access without reading private conversations.
Defined
Updates
The administrator downloads signed bundles to the phone and transfers them to the paired appliance over the local Wi‑Fi network.
Defined
Storage
The intended launch design supports encryption using a dedicated USB key. Removing it prevents encrypted storage from being read.
Launch design
Audit logs
Event coverage, retention and administrator visibility are not yet finalized.
In definition
Backups
Backup destination, encryption and recovery workflow are not yet finalized.
In definition
Marking of AI-generated output
Machine-readable marking of AI-generated content is planned and will be delivered through a software update, following the EU Code of Practice on transparency of AI-generated content.
In definition
03
Data handling and diagnostics
User content and appliance health data are separate categories. Diagnostic information does not include the content of AI work.
Available for requested troubleshooting
Appliance health data
- Appliance temperature and load
- Installed software version
- Performance measurements
- Standard functional test results
Internet search
Disabled by default. An administrator can enable it; only the search text leaves the box, never your documents. A filter that removes personal data from search requests is in development.
Software and models
Downloaded by the administrator's phone and transferred to the paired appliance over local Wi‑Fi. LionBox does not fetch them directly.
Setup pairing
Bluetooth is used once, during administrator setup, to pair the phone with the box. Updates travel over Wi‑Fi, not Bluetooth.
04
Administrative and user boundaries
Administrative access is separated from the content of individual workspaces.
Administrator can
- Assign the appliance to an owner account
- Create and disable user accounts
- Set knowledge-space permissions
- Initiate updates and optional search
Administrator cannot
- Read a user's private requests
- Read private workspace conversations
- Receive prompt content through diagnostics
- Bypass the configured workspace boundary
Organization remains responsible for
- Office network security
- Administrator credentials
- Physical access to LionBox
- Policies for optional external features
05
Offline verification procedure
A customer can verify that normal inference does not depend on an internet connection.
Expected result
The local workspace loads, the installed model responds and approved indexed knowledge remains available. Internet search is unavailable.
- 01Complete setup and confirm the preinstalled model is ready.
- 02Keep the office LAN active, but disconnect its internet gateway.
- 03Open lionbox.local from an authorized computer on the same network.
- 04Send a test prompt and query an indexed document.
Open controls
Audit logging and backup behavior are still being defined.
Event coverage, retention periods, backup destination, encryption and recovery procedures will be documented before purchase and shipping. They are not presented as completed controls.
Conformity
Conformity documentation will accompany each unit at dispatch. See Conformity documents.
Report a vulnerability
Found a security issue? Email support@lionbox.ai. Our security.txt is at /.well-known/security.txt.
Need this architecture reviewed against your environment?
Send us your network topology, deployment requirements or security questions.