Inside your Microsoft organisation
The runtime lives in your own Azure subscription and Microsoft 365 tenancy. The AI model is hosted on Microsoft as well. Bring-your-own-model options are available if you prefer another provider. Libris does not host your model or hold your keys.
We do not have access to your data
Nothing about your organisation comes back to us. The only signal we receive is operational metadata (is the app running healthily in your environment). We do not receive message content, document content, or client data.
Content stays in your tenancy
Because the software that reads mail and SharePoint also runs in your subscription, client content is not pulled through Libris-controlled infrastructure.
Humans decide what leaves
Emails to external recipients are drafted, never auto-emailed. Staging a draft for a colleague is likewise not sent. Calendar invites are a distinct, permitted booking function.
Built for the compliance of tomorrow
Append-only audit trails, inspectable memory, and permanent skill-version provenance, so you can show which instructions were in force when the agent acted.
Guardrails in the executor
Send rules and change gates are enforced server-side. They are a product feature, not a prompt suggestion the model might ignore.