بِسْمِ ٱللَّٰهِ ٱلرَّحْمَٰنِ ٱلرَّحِيمِ
Trust is engineered.
Enterprise-grade infrastructure. Zero-trust architecture. Compliance-first design.
Built on Azure.
Azure Container Apps
East US 2 region · auto-scaling · private networking
Azure AI Search
668,000+ indexed documents · semantic ranking · vector search
PostgreSQL Flexible Server
50+ tables · encrypted storage · automated backups
Data protection at every layer.
AES-256 Encryption
All data encrypted at rest and in transit. Azure-managed keys with customer-managed key option for sensitive workloads.
JWT via Azure AD B2C
Authentication tokens issued and validated through Microsoft Entra ID (External ID). Token validation on every protected endpoint.
Azure Key Vault
All secrets, API keys, and connection strings stored in Key Vault. Zero hardcoded credentials anywhere in the stack.
Private Networking
No public endpoints for backend services. All service-to-service communication routed through Azure Private Endpoints.
Standards we meet.
HIPAA
Healthcare
ActiveFERPA
Education
ActiveCOPPA
Children
ActiveGDPR
EU Privacy
ActiveCCPA
CA Privacy
ActiveSOC 2
Security audit
PlannedWhat we do. What we don't.
What we do
- Store conversations for memory and personalization (with consent)
- Encrypt everything at rest and in transit
- Respect deletion requests within 30 days
- Log access for audit trails via Azure Monitor
What we don't
- Use your data for model training
- Sell or monetize user data
- Log tokens, passwords, or PII
- Share data with third parties
Data residency: East US 2 — Azure region. US-based storage only.
بِسْمِ ٱللَّٰهِ ٱلرَّحْمَٰنِ ٱلرَّحِيمِ
Ask Theo. Your data stays yours.
I'm here. Ask me anything about Islam. Every source cited. Every chain verified.
Ask about any hadith, ruling, or scholar…449,415 graded hadith · 27,115 verified narrators · 95.2% Bukhari convergence