Privacy & Data

Varen's data-sovereignty model is about where your content is stored. Your durable content — conversations, uploaded files, knowledge base, profile, and indexes — is stored on your node, not in Varen's database. This reference explains what stays on your node, what the control plane stores, and how content is handled in transit when you ask a question.

The architecture

Your durable content lives on your node. The Varen control plane (the cloud component) brokers connections, handles authentication, routes work, coordinates model access, and manages billing. It is not the durable store for your conversations, files, or knowledge base — that data stays on the hardware you've designated as your node.

This separation is architectural, not a policy setting. Your content isn't kept out of a Varen database by a configuration toggle or a promise about behaviour — the durable store simply is your node. The control plane holds only the operational records it needs to run the service.

What the control plane stores

The Varen control plane persists a defined, limited set of information:

• Your account details — email address, plan, and credit balance
• Node connection state — whether a node is online and which account it belongs to
• Billing records — usage amounts and timestamps, not the content of conversations

It does not store your conversations, uploaded files, knowledge base, or session history as durable customer content. Those remain on your node.

Content in transit during a query

Answering a question is different from storing data. To produce a reply, the control plane assembles the prompt and calls the model provider, so it necessarily handles some of your content in transit for that turn:

• The text of your question, as sent for the current turn
• The relevant context retrieved from your knowledge base for that turn
• The bytes of an uploaded file when it is extracted or analysed — SaaS fetches the file from the node and forwards it to the extraction or model provider

This is expected and necessary for inference: it is how the answer gets generated. The key point is that SaaS passes this content through to fulfil the request rather than retaining it as your durable store. Where you use a hosted model or extraction provider, that content also reaches the provider, whose retention behaviour is governed by its own terms.

The encrypted tunnel

Your node connects to the Varen control plane through an encrypted tunnel. Traffic between your browser and your node travels through this tunnel — your browser connects to varen.tech, and varen.tech relays the connection through to your node. WireGuard, gRPC, and TLS protect this traffic in transit. As noted above, this transport encryption is separate from inference: on the inference and extraction paths SaaS terminates the request and handles the content to build and route the prompt.

This architecture means your node doesn't need to be directly reachable from the internet. The encrypted tunnel provides the connection path. Your node reaches out to the control plane; the control plane holds the connection open; your browser accesses the node through that connection.

Hosted inference providers

When you use a hosted model, the in-transit content described above doesn't stop at Varen — it continues to the AI provider that generates the reply. The text of your question, along with the relevant retrieved context, is sent to that provider as part of each request.

Varen sends each request independently rather than using the provider as your conversation store, but provider-side logging, retention, and training behaviour are governed by that provider's own terms. This is the same pattern as any cloud-based AI service. Where your node is configured for local inference, that request can stay on the node instead.

If you have concerns about specific sensitive content when using a hosted provider, note that file content is included in a request when it's directly relevant to the question, and choose accordingly.

Node hosting and privacy

Where you run the node determines who controls the hardware your durable content is stored on. The storage-sovereignty model is the same in each case — your durable content lives on the node — but physical and operational control differ.

Your hardware — the node runs on hardware you own, in your home or office. Your durable content is under your physical and operational control, and Varen has no physical or network access to the machine. This is the highest level of hardware sovereignty.

Your cloud account — the node runs on a cloud host provisioned under your own account (AWS, Hetzner, DigitalOcean, or similar). The infrastructure is yours; Varen has no access to it. Your cloud provider has the usual access that comes with operating the underlying infrastructure — the same access any cloud provider has to any tenant's data.

Managed hosting — if you'd rather not run the infrastructure yourself, managed hosting may be available on request. Because topology, operator access, and backup arrangements matter for sovereignty, confirm those specifics with us before relying on this option rather than assuming a particular isolation guarantee.