Customer and catalog data stay in your account.
Exalt Reserve
For retailers whose customer, order and catalog data already runs in AWS, Azure or Google Cloud. Exalt Reserve deploys open models, retrieval, agents and monitoring into that account instead of an Exalt-hosted service.
Where a retailer starts.
Customer and catalog data in your cloud
If that data already sits in your own cloud account, Reserve deploys into the same account and you keep the data, models and vector stores.
Card data has its own standard
PCI DSS applies to entities that store, process or transmit cardholder data or sensitive authentication data, or that could affect the security of the cardholder data environment.PCI DSS
Service providers need a contract
California's Consumer Privacy Act requires a business that discloses personal information to a service provider for a business purpose to enter into an agreement with that provider.California Consumer Privacy Act
Your review
Your organization runs its own review and stays responsible for its conclusions.
Same question. Different access.
Two people ask Exalt Reserve the same question. Each answer comes only from the documents that person can read.
Signed in as a merchandising lead
- A merchandising lead asks: "Can we discount the spring collection before it launches?"
- The answer comes from the spring pricing plan and cites it. The question, who asked and the source shown are recorded in the audit log.
- The citation opens the spring pricing plan at "Launch pricing", with the passage highlighted.
Signed in as a store associate
- A store associate asks the same question.
- They cannot read the spring pricing plan, so the answer never mentions it. It comes from the store team handbook, which says who to ask.
- The citation opens the store team handbook at "Pricing", and the audit log records the question, who asked and the one source shown.
Illustrative. A demonstration workspace, not a customer session.
What sits in your account.
- Models, retrieval, agents and monitoring run inside your own AWS, Azure or Google Cloud account. This is not an Exalt-hosted shared service.
- Open models self-hosted in your account are the default: Llama, Mistral, Qwen, Gemma and DeepSeek. Which models run, and whether a use case also uses an outside AI service, is decided with you.
- Reachable only from your private network, with no public endpoint. People sign in through your own identity provider.
- Data is encrypted at rest and in transit.
- Exalt runs a management plane outside your account. It holds no customer content.
- Two bills: Exalt's software, and your own cloud bill. You keep the data, models, vector stores, credentials and subscription.
- An audit log of questions, answers and admin actions is kept in your own cloud account, and your admin sets how long history is kept.
Start with the account you already run.
Bring the cloud account, the material you would put to work and the person who reviews your vendors. The consultation starts with those three.