Your model. Your data. Your systems.
Private by architecture, not by policy. YP runs inside your own environment. It masks sensitive data before any model call, and it hands every important action to a person for approval. Built to pass your security review.

Security is the foundation YP is built on, not a layer added on afterwards.
Your identity, your rules
Sign in with SSO (SAML and OIDC) and MFA, and set session rules that match your own policies. Everyone gets only the access they need.
Access control for agents
AI employees get the same tight, need-only permissions that people do, so an agent can never quietly do more than it should. Every action is logged, and every action can be undone.
Built for compliance
YP is built to meet SOC 2 Type II, ISO 27001, and ISO 42001 for AI management, with formal certification in progress. We can provide a DPA for GDPR, take a clear position on the EU AI Act, and offer a setup that is ready for HIPAA.
Masked before the model
The privacy layer removes and masks personal and sensitive data before anything reaches a model, using rules you control. We keep no data after processing, and nothing you run is ever used for training.
Every session runs in its own private sandbox. It is created when you start and deleted the moment you finish. Nothing is ever shared between sessions, so data from one can never reach another. It is not just unlikely. It is impossible by design.
Choose exactly how private you need to be.
Every organisation has its own needs for security, privacy, and control over its data. YP adapts to yours with deployment options built for maximum trust, compliance, and control.
Managed (single tenant)
We host and run a copy that is yours alone. It is fully managed, monitored around the clock, and secure by default. Ideal for teams that want speed and simplicity without giving up compliance.
Your cloud (VPC)
A dedicated, isolated instance that runs inside your own AWS, Azure, or GCP account, in the region you choose. Your data stays where your rules require and is kept fully separate from other customers.
On-prem
YP runs entirely in your own data center, under your team and your network controls. Your data never leaves the walls you already control.
Air-gapped
Fully disconnected from the internet, with a local model registry, mirrored dependencies, and internal PKI. Air-gapped really means air-gapped, not just on-prem behind a firewall.