R2 Copilot

Use any AI model.Leak nothing.

Your team gets every major AI model inside the tools they already use. Prompts are encrypted before they leave the device and arrive at the model unattributable.

MicrosoftSolution Partner
Microsoft AppSourceAvailable on Microsoft Marketplace
Patented SDNP · US 9,998,434 B2
337 enterprise customers
220,000 users

One layer. Three problems solved.

01 / MODELS

Every model, one subscription

Your team picks the right model for the job: GPT, Claude, Gemini, Grok, Llama, DeepSeek and open-weight models you host yourself.

NEW MODELS ADDED AUTOMATICALLY
02 / WORKFLOW

Inside the apps they already use

No new tab, no new habit. R2 runs in Microsoft 365, Google Workspace, the browser and the chat clients your team already has open.

OUTLOOK · GMAIL · BROWSER · TELEGRAM
03 / GOVERNANCE

Controls your auditors accept

Role-based access, policy rules, PII and PHI handling, and logging configured to your obligations. Answer the auditor directly from the log.

POLICY · ACCESS · AUDIT TRAIL

SHADOW AI / THE PROBLEM

You already know where this goes wrong

Your team is using AI whether you bought it or not. Blocking the tools slows the work. Approving one vendor solves only a fraction of the risk.

Risk chain / activeUnmanaged AI use

01 / UNAPPROVED ACCESS

59%of workers use AI tools outside company control

02 / DATA EXPOSURE

77%paste confidential company information into them

03 / SECURITY INCIDENT

43%of breaches now involve unmanaged AI use

04 / BUSINESS IMPACT

$11.5Maverage cost of a data breach in the United States

IBM, COST OF A DATA BREACH 2026 · SHADOW-AI BREACHES DOUBLED YEAR OVER YEAR

LEAKS RADAR / LIVE INTELLIGENCE

AI leaks do not wait for the quarterly review.

Follow the incidents, vendor changes and source documents that change your risk posture.

See the live radar

HOW IT WORKS / PATENTED SDNP

Encrypted before it leaves.
Unattributable when it arrives.

Read the architecture
CLIENT ENDPOINTSDNP · SOVEREIGN SECURITY PERIMETERFOUNDATION LLM
US PATENT 9,998,434 B2 · US 2021/0014939 A1
01

Your team writes a prompt

In Outlook, Word, Teams, Gmail, the browser or R2 chat. Nothing changes about how they work.

02

R2 strips, encrypts and routes it

SDNP splits and encrypts traffic across dynamic paths. PII and PHI controls apply before anything leaves.

03

The model answers

The model receives what it needs to answer and nothing that identifies your organisation.

04

You keep the record

The response returns through the same layer. Your log holds the full interaction; the vendor cannot tie it to you.

WHERE IT RUNS

No new tab. No new habit.

R2 installs into the environment your organisation already runs and behaves the same in all of them.

01 / MICROSOFT 365Microsoft

Inside the tools where the work already happens.

Outlook, Word, Excel, PowerPoint, OneNote and Teams as native add-ins deployed across your tenant.

OUTLOOKWORDEXCELTEAMS
02 / GOOGLEGmail

Workspace, governed.

Gmail, Google Docs and Google Sheets from the Workspace Marketplace.

Explore Google Workspace →
03 / ANYWHERE ELSE
BrowserTelegram

Browser to chat.

The R2 web app, Chrome extension and the R2 bot in Telegram.

Apps and extensions →

WHO IT IS FOR

Built for organisations that cannot use public AI.

1.8 million US organisations are legally barred from putting their data into a public model. R2 gives the regulated ones a usable path forward.

All use cases
01

Healthcare & life sciences

Keep clinical, claims and PHI workflows inside the perimeter.

02

Financial services

Supervision, access controls and audit trails for SEC, FINRA and NYDFS obligations.

03

Government

Deploy in GovCloud or air-gapped for citizen, case and CJIS data.

04

Defense & supply chain

Run open-weight models on your own hardware for ITAR and DFARS workloads.

05

Legal & professional services

Preserve privilege and client confidentiality across drafting and review.

06

Manufacturing & engineering

Keep designs, source code and trade secrets out of vendor retention windows.

07

Security & IT leadership

Replace shadow AI with a governed path people will actually use.

DEPLOYMENT / YOUR PERIMETER, YOUR RULES

Three ways to run it.
Same controls in all three.

01

Routed

We handle the connection to commercial models. Nothing to host. Fastest to start.

LIVE IN MINUTES
02

Self-hosted

Run open-weight models on your own infrastructure. Data stays exactly where you put it.

YOUR INFRASTRUCTURE
03

Your cloud

Your tenant, region and keys — including GovCloud, private VPC and air-gapped environments.

MAXIMUM CONTROL

Routed is live the moment the add-in is installed. No deployment project, no DevOps hire.

TRANSPARENT TIERING

Your plans.
Nothing to deploy.

Scale from single researchers to global sovereign enterprise divisions. All tiers include patented SDNP encryption.

SOLO OPERATOR

Free

$0/ seat / mo
  • 1 Dedicated Seat
  • GPT, Claude, Gemini access
  • Web Console & Browser Add-in
  • SDNP In-Flight Encryption
Try for free

SOLO OPERATOR

Pro

$29/ seat / mo
  • 1 Dedicated Seat
  • GPT, Claude, Gemini access
  • Web Console & Browser Add-in
  • SDNP In-Flight Encryption
Select Pro plan

COLLABORATIVE WORKGROUPS

Team

RECOMMENDED
$249/ month flat
  • Up to 10 Seats Included
  • All Frontier Models Included
  • Office 365 & Google Add-ins
  • Shared Token Allocation Pool
  • Admin Usage & Access Dashboard
Select Team plan

DEPARTMENTAL SCALE

Business

$999/ month flat
  • Up to 50 Seats Included
  • SAML / SCIM SSO Integration
  • Data Loss Prevention (DLP) Rules
  • In-Tenant Audit Log Export
  • Self-Hosted Model Endpoint Support
Select Business plan

GLOBAL SOVEREIGNTY

Enterprise

$2,559/ mo starting
  • Unlimited Seats / Volume Tiering
  • Custom Cloud Deploy (GovCloud/VPC)
  • Bring Your Own Keys (BYOK)
  • Executed BAA & Custom Legal SLAs
  • Dedicated Cryptographic Architect
Select Enterprise plan

WHAT PEOPLE USE IT FOR

The work stays familiar.
The risk does not follow it.

01 / CORRESPONDENCE

Draft the reply.
Keep the thread private.

Summarise, draft and check sensitive correspondence without moving it to a consumer account.

02 / DOCUMENTS

Contracts and privileged material

Draft, compare versions and summarise what you were sent.

03 / ANALYSIS

Data and spreadsheets

Build formulas, clean imports and explain complex sheets without uploading the data.

04 / ADOPTION

Replace shadow AI

Give people a governed path they prefer to the unapproved account they use now.

337 ENTERPRISE CUSTOMERS · 220,000 USERS

SECURITY REVIEW / FAQ

Questions your security team will ask.

Clear answers, before procurement turns into a six-month archaeology project.

Does the model provider ever see our data?+

The model receives what it needs to produce an answer and nothing that identifies your organisation. SDNP encrypts, splits and routes the prompt across independent nodes.

What does R2 store?+

R2 stores no user-generated content. Prompts are encrypted on the device and discarded when the add-in closes.

Which models can we use?+

GPT, Claude, Gemini, Grok, Llama, DeepSeek and open-weight models you host yourself. The policy set follows the user when the model changes.

Does this make us compliant?+

R2 provides privacy controls, residency options and audit evidence for obligations including GDPR, HIPAA, CCPA, SEC, FINRA and NYDFS rules.

How long does deployment take?+

Install the add-in or extension, sign in and start working. Enterprise tenant-wide or custom environments are configured with the R2 team.

Can we buy through Microsoft?+

Yes. R2 add-ins are published on Microsoft AppSource and R2 is co-sell ready.

READY WHEN YOUR TEAM IS

Let your team use AI.
Keep the record straight.

Try R2 free

Or start inside Office 365, Google Workspace, the browser or Telegram.