Platform
Held inside your perimeter, run in isolation.
Canvas is built to be installed where your operation is, and to keep the customer's copy of operational truth under the customer's control.
What is in place
Plain statements about how Canvas works.
Your data stays where you put Canvas
Canvas is deployed by your integrator on your servers, or in a cloud you choose. The customer holds the data inside their own perimeter.
One sandbox per connection
Each connected system runs in its own runtime, so a problem with one source stays with that source.
Assistants are read-only and signed in as a person
A connected AI assistant uses the signed-in person's own Canvas account and can only read. Removing the account ends the assistant's access.
Permissions are set per feature
Each user is given the features they need, such as dashboards or the assistant connection.
Video stays in your video system
Canvas bridges to the video system you already run. It does not record video itself.

What we have not stated here
[CONFIRM: certifications, attestations and audit-logging statements the business can make. None are claimed on this page.]