For enterprises · deployment, identity, evidence

Private AI at enterprise scale. Any model, your perimeter.

R2 lets your organisation use frontier and open-weight models from inside Microsoft 365, Google Workspace and the browser, with routing, access rules and audit evidence you control. Deploy into your own tenant, or run models on your own infrastructure.

Use any AI model. Data never leaves your tenant.

R2 sits between the applications your people use and the models they want to use. Everything above the line is where work happens. Everything below it is where models answer. R2 is the line.

Where your people already work

OutlookWordExcelPowerPointOneNoteGmailGoogle DocsGoogle SheetsChrome extensionR2 web appTelegram
R2R2 control layer
Encrypted on the device, role-controlled, policy-enforced, audit-logged. This is the line.

Any model, any cloud, any environment

GPTClaudeGeminiGrokLlamaDeepSeek R1Open-weight models
Model governanceAI routingData residencyEncryptionPolicy enforcementAuditability

Users

Role-based access, policy-based authorization, human accountability.

Data

PII and PHI control, data residency, tenant isolation.

AI models

Public APIs, self-hosted models, private models.

Governance

Audit trail, policy engine, evidence export.

Every AI interaction is encrypted, policy-controlled and audit-ready.

Controls that produce evidence, not just settings

Access

Single sign-on with Microsoft, Google, Apple and other providers, and directory-mapped role and policy rules.

Data

PII and PHI detection and handling applied before anything leaves the perimeter.

Record

Configured to your obligations. Who asked what, of which model, when, and as much of the exchange as your regulator requires.

When your auditor asks how AI is used here, you answer from the log rather than from memory.

What your security review will ask for

Certifications

Microsoft Solutions Partner, with certified-software status for the add-ins.

Certification badges

Data handling

No user content is stored. Prompts are encrypted on the device and discarded on exit; your audit trail stays in your environment.

No user content is stored. Prompts are encrypted on the device and discarded on exit; your audit trail stays in your environment.

Regulatory frameworks our customers work under

HIPAA and BAA obligations, SEC and FINRA supervision and books-and-records, NYDFS Part 500, FedRAMP, CJIS, ITAR, DFARS 7012 and NIST 800-171, GDPR, CCPA and the EU AI Act.

R2 ensures compliance with the data privacy acts and regulations that govern personal data in AI workflows, and gives you the controls and the audit evidence to demonstrate it.

Why now

Shadow AI is already here

43% of breaches now involve shadow AI, up from 20% a year earlier. 59% of workers use unapproved AI tools. There is no rolling this back.

Enforcement has started

The EU AI Act became fully applicable on 2 Aug 2026, with penalties to €35M or 7% of global turnover. US states enacted hundreds of AI laws; Colorado's ADMT rules bind from 1 Jan 2027.

Copilot forces a control plane

Microsoft added Copilot oversharing alerts and DLP controls to the M365 admin center in Oct 2026. Every agent rollout now needs permissions, logging and evidence.

The category is funded

Gartner opened its first Magic Quadrant for AI governance in Jun 2026. Zscaler's AI-security ARR passed $400M, growing over 80% year over year.

Compliant AI is no longer discretionary, and the layer that delivers it is still missing.

Where we are

337enterprise customers
220,000users
40+patented inventions

Patented technology

SDNP granted as US 9,998,434 B2 in June 2018, assignee Listat Ltd, filed across US, EP, CN, JP, CA, AU, SG, KR, IL, TW, UA, RU and AE. Last Mile Protection filed as US 2021/0014939 A1. 40+ inventions behind the platform.

The team

Founded by Evgen Verzun, 20+ years in cybersecurity and secure communications for critical infrastructure and inventor of the SDNP protocol, with Ahmad Qazi leading regulated go-to-market. 26 engineers across AI, applied cryptography, security and enterprise systems.

Company figures as of August 2026.

Your platform team keeps its roadmap

Most organisations are working the same day: the add-in installs, people sign in, and the policy set is yours to configure. Where you want a tenant-wide rollout, a private environment or an air-gapped deployment, our team configures it with your security owners.

Published on Microsoft AppSource and co-sell ready. No Azure connection is required — licences are assigned by email or domain and managed in your R2 profile.

Above 135 seats

Custom deployment, residency options, volume pricing, managed resources and 24/7 support.

Talk to sales

Bring the security review forward

Map deployment, identity and audit evidence with the people who will review it.