Client endpoint
Web app · Microsoft 365
Google Workspace · Browser
How R2 keeps a prompt private
R2 encrypts what you write before it leaves your device, splits and routes it across independent nodes, and discards it when you close the add-in. Built on SDNP, a patented protocol for securing data in transit, in use and at rest.
Four stages, one round trip
01
On your device
Your prompt is encrypted where you typed it. Nothing readable crosses the network.
02
In transit
SDNP scrambles, splits, mixes and repeatedly encrypts the packets, then routes them across independent media nodes.
03
At the model
The model receives what it needs to answer and nothing that identifies you.
04
On close
Your content is discarded when the add-in closes. There is no copy to index, subpoena or leak later.
SOVEREIGN SECURITY PERIMETER
R2 Trust Layer
Zero-Knowledge Neural Routing Engine
End-to-end encryptionSOC 2 infrastructureSDNP mesh routerAudit & compliance
NO INTERMEDIATE RETENTION · ZERO DATA AT RESTFoundation LLM
Receives only what it needs.
No origin. No identity.
No single node holds a complete message. Reassembly happens in transit, never at rest.
Patented in 2018. Built for critical infrastructure.
SDNP moves data over multi-route, meshed communications rather than a single path. Packets are reordered, split, mixed and repeatedly encrypted, then reassembled only as they pass through independent nodes. No single node holds a complete message.
Our founder designed the protocol for secure communications years before R2 existed. It was granted as US 9,998,434 B2 and filed across the US, EP, CN, JP, CA, AU, SG, KR, IL, TW, UA, RU and AE, with 40+ inventions behind it.
Last Mile Protection
A second patent covers the final leg between the network nodes and the user's device, the segment most protocols leave exposed. Filed as US 2021/0014939 A1.
ONE FRAGMENT PER NODENO NODE CAN RECONSTRUCT THE MESSAGE
Three architectures. Same protocol underneath.
Routed
We operate the node network and manage the connection to commercial models. Nothing for you to host.
Self-hosted
Open-weight models on your own infrastructure. Nothing leaves your network at all.
Your cloud
R2 in your tenant. Your keys, your region, your logs. AWS GovCloud, Azure Government, private VPC or air-gapped.
YOUR APPS
COMMERCIAL
MODELS
MODELS
R2 ENCRYPTED · MULTI-ROUTE · NO ATTRIBUTABLE ORIGIN
YOUR NETWORK · NOTHING LEAVES
YOUR APPS
R2CONTROL
OPEN-WEIGHT
MODELS
MODELS
YOUR TENANT · REGION · KEYS · LOGS
YOUR APPS
KEYS
R2YOUR TENANT
LOGS
MODELS
We hold nothing
R2 stores no user-generated content. Your prompts are encrypted on the device and discarded on exit, so there is no archive to index, subpoena or leak later.
Your own audit trail is separate from that: it records who asked what, of which model and when, and it stays inside your environment.
Compliance you can evidence
R2 ensures compliance with data privacy acts and regulations, including GDPR, HIPAA and CCPA, and gives you the controls and the audit evidence to demonstrate it.
Certifications: Microsoft Solutions Partner, certified software
Send this to your security team
Walk through the architecture, controls and audit evidence with an R2 specialist.