Your staff is already using ChatGPT.
Give them AI you control. Bike4Mind deploys entirely in your AWS account, and your security team keeps the keys.
- AES-256
- At rest with your KMS keys, TLS 1.3 in transit
- AWS-only
- Every model call stays on Bedrock, in your account
- In production
- At Exacta Systems and TwinSpires
The architecture is the answer.
A BAA is a legal document. This is a topology your security architect can verify, in AWS-only mode, with full model access or on GovCloud. Compare the three →
Your framework, mapped to its controls.
We hold no certifications to lend you. Self-hosted, Bike4Mind runs under the program you already operate, and every control lives in your AWS account.
Healthcare HIPAA
Every query stays inside your perimeter, and every session is logged to CloudWatch.
HIPAA in your own cloud →HIPAA
Your AWS account
PHI access controls and audit logging: IAM roles, session logging to CloudWatch, encryption at rest via your KMS
Banking and finance SEC · FINRA · SOX
Give analysts AI inside your VPC, with a supervisory audit trail your examiner can pull in seconds.
FINRA 3110
Your AWS account
Supervisory procedures for communications: complete AI interaction logs in write-once S3 storage
SOX §802
Your AWS account
Record retention and integrity: S3 Object Lock (WORM) and CloudTrail for all API activity
SEC 17a-4
Your AWS account
Electronic record preservation: Object Lock compliance mode with 7-year retention
Defense and space ITAR · FedRAMP
Your GovCloud, your clearance boundaries, and no external API calls in the stack.
GovCloud deployment, on request →ITAR
Your AWS GovCloud
Export-controlled data containment: GovCloud deployment, zero external API calls, US-only model routing
FedRAMP
Your AWS GovCloud
Government workload authorization: AWS GovCloud (FedRAMP High authorized) and a government model catalog
Government FedRAMP · FISMA · NIST 800-53
Deploys on GovCloud, with NIST 800-53 control mapping available on request.
GovCloud deployment, on request →FedRAMP
Your AWS GovCloud
Government workload authorization: AWS GovCloud (FedRAMP High authorized) and a government model catalog
| Framework | Requirement | How Bike4Mind addresses it | Control location |
|---|---|---|---|
| HIPAA | PHI access controls and audit logging | IAM roles, session logging to CloudWatch, encryption at rest via your KMS | Your AWS account |
| FINRA 3110 | Supervisory procedures for communications | Complete AI interaction logs, immutable write-once S3 audit storage | Your AWS account |
| SOX §802 | Record retention and integrity | S3 Object Lock (WORM compliance), CloudTrail for all API activity | Your AWS account |
| ITAR | Export-controlled data containment | GovCloud deployment, zero external API calls, US-only model routing | Your AWS GovCloud |
| FedRAMP | Government workload authorization | AWS GovCloud (FedRAMP High authorized), government model catalog | Your AWS GovCloud |
| SEC 17a-4 | Electronic record preservation | S3 Object Lock compliance mode, 7-year retention configuration | Your AWS account |
| GDPR | Data residency and right to erasure | EU region deployment, bucket-level deletion, no cross-region replication | Your AWS EU region |
| SOC 2 Type II | Security, availability, confidentiality | Your controls on your infrastructure; the source is available to verify | Your AWS account |
Need a framework not listed? We've completed CAIQ, SIG Lite and custom vendor questionnaires.
Questions your security review will ask.
More on our Security, SOC 2, HIPAA and GDPR pages.
Self-hosted, it goes from your user's browser to the model inside your AWS account, unless you opt into an external model with your own key. It never touches Bike4Mind infrastructure.
Self-hosted, no one at Bike4Mind: we don't operate your deployment. Access runs through your AWS IAM policies and Bike4Mind's role-based access, and you own the keys.
Yes. Every user action, model call and admin change is logged as structured JSON to CloudTrail and your S3 bucket, ready for Splunk, Datadog or CloudWatch.
Self-hosted, your data stays in your AWS account under your KMS keys. There's nothing for us to export, because we never held it.
Your compliance team has questions.
So do we.
Tell us your framework, your use case and what your auditor asked last time, and we'll map each answer to a control in your AWS account.Demos are led by our CEO, Erik Bethke: erik@bike4mind.com