# Neural Inverse United States > Neural Inverse for regulated engineering teams in the United States: deploy in the US, contract with Neural Inverse, Inc., and keep the evidence export controls, CMMC, HIPAA and the NIST AI RMF ask for. Source: https://neuralinverse.com/us/ --- ![](/photos/hangar.jpg) Neural Inverse United States # Engineering software for regulated industries in the US. Run Neural Inverse in your own data centre, your US cloud region or our N. Virginia region, contract with Neural Inverse, Inc., and keep the evidence your assessors expect. [Explore our products](https://neuralinverse.com/#products) Contracting company Neural Inverse, Inc. Hosted region AWS US East (N. Virginia) Deployment Self-hosted, your cloud, air-gapped or hosted Rules on this page ITAR and EAR, CMMC, HIPAA, NIST AI RMF [Where your data stays ↓](https://neuralinverse.com/#deploy)[What stays where ↓](https://neuralinverse.com/#residency)[Rules you work under ↓](https://neuralinverse.com/#rules)[Buying ↓](https://neuralinverse.com/#buying)[Questions ↓](https://neuralinverse.com/#questions) \[Draft: to be approved by legal counsel before publication\] Neural Inverse Aircraft, vehicles, medical devices, power grids and banks run on software that must be traceable, reviewed and approved. We build the platform those teams use to develop it with AI, and to govern every AI tool they use. [About the company](https://neuralinverse.com/company/) ## Products [Deployment options](https://neuralinverse.com/deployment/) [![](/photos/bench.jpg) For engineering teams Neural Inverse Build Editor, Agents and CLI. AI that builds, tests and debugs on the toolchains you already qualified. Learn more](https://neuralinverse.com/build/)[![](/photos/team.jpg) For security and compliance Neural Inverse Govern One policy, approval flow and audit trail for every AI tool in use. Powered by Keystone. Learn more](https://neuralinverse.com/govern/) ## Industries [All industries](https://neuralinverse.com/industries/) ![](/photos/facility.jpg) Aerospace and defence - [Avionics](https://neuralinverse.com/industries/avionics/) - [Defence and space](https://neuralinverse.com/industries/defence/) Mobility and devices - [Automotive](https://neuralinverse.com/industries/automotive/) - [Medical devices](https://neuralinverse.com/industries/medical/) - [Semiconductors and FPGA](https://neuralinverse.com/industries/semiconductors/) Industry and infrastructure - [Energy and utilities](https://neuralinverse.com/industries/energy/) - [Industrial automation](https://neuralinverse.com/industries/industrial/) - [CNC and machining](https://neuralinverse.com/industries/cnc/) - [Telecommunications](https://neuralinverse.com/industries/telecom/) Financial services - [Banking and mainframe](https://neuralinverse.com/industries/banking/) How a change moves ## From request to record, with a person at every decision that matters. 1. Request An engineer describes the change, linked to a requirement or ticket. 2. Agent works Edits, builds and tests in its own session, on your toolchain. 3. Your tools verify Your qualified compiler, simulator or analyser runs the checks. 4. Engineer approves An engineer confirms every write to hardware; the agent actions your policy marks wait for a named approver. 5. On record Change, results and approval are kept together in a tamper-evident log. Neural Inverse Govern One set of controls for every AI tool your engineers use, including the ones you didn't build. Enforced Actions are checked and blocked before they run. Claude Code, Cursor, Windsurf, GitHub Copilot CLI Managed configuration Settings are pushed centrally; checks are advisory. Gemini CLI Monitored Activity is recorded, not blocked. Kiro, Cline, Amazon Q [About Govern](https://neuralinverse.com/govern/) Deployment ## Deploy where your data has to stay in the US. - **Self-hosted:** Install Neural Inverse on your own servers in the US. Your code, prompts, audit record and keys stay there. - **In your cloud:** Deploy into your own AWS, Azure or Google Cloud account, in a region in the US. - **Air-gapped:** Runs on networks with no internet connection, using models you host. Nothing calls out. - **Hosted by us:** Our shared service runs in AWS US East (N. Virginia). A dedicated deployment runs in the AWS, Azure or Google Cloud region you choose. [All deployment options](https://neuralinverse.com/deployment/) What stays where ## Your content, sign-in details and model calls, by deployment. [Security and trust](https://neuralinverse.com/trust/) | Deployment | Content and audit record | Sign-in details | Model calls go to | | --- | --- | --- | --- | | Self-hosted | Your servers | Your servers | Models you host, or providers you configure | | In your cloud | Your cloud account, in the region you choose | Your cloud account | Models you host, or providers you configure | | Air-gapped | Inside your network | Inside your network | Models you host inside the network | | Hosted by us, shared | AWS US East (N. Virginia) | United States | Providers you configure, or ours where you use models we provide | | Hosted by us, dedicated | The region you choose | The region you choose | Providers you configure, or ours where you use models we provide | Model providers we use for you are listed on our [sub-processors](https://neuralinverse.com/legal/subprocessors/) page. Rules you work under ## What they ask, and what Neural Inverse gives you toward them. We produce records your assessors and regulators can use. We never say a product is certified to a rule, or that using it makes you compliant; that stays with your organisation. [Standards](https://neuralinverse.com/standards/)[Export control statement](https://neuralinverse.com/legal/export-control/) - **ITAR and the EAR:** What it asksControlled technical data and designs stay with authorised people and inside licensed boundaries.What Neural Inverse gives youSelf-hosted and air-gapped deployments keep controlled designs inside your boundary. Our hosted service is not offered for ITAR-controlled data. - **CMMC and NIST SP 800-171:** What it asksDefence suppliers protect controlled unclassified information, with access control, audit logging and configuration management. From 10 November 2026, Defense Department contracts that involve it require a third-party Level 2 assessment by default.What Neural Inverse gives youSingle sign-on and access control, approvals by named people, records of every change and a tamper-evident audit log, as evidence for your assessment. - **HIPAA:** What it asksSafeguards for protected health information, including access control and audit records.What Neural Inverse gives youGovern's HIPAA rule pack and data loss prevention on prompts and context. - **NIST AI RMF and FedRAMP:** What it asksAI risk managed and documented; cloud services used by federal agencies assessed against FedRAMP controls.What Neural Inverse gives youGovern's NIST AI RMF rule pack with evidence records, and a FedRAMP rule pack that checks your organisation's records. Neither authorises a service. Buying ## Contract and pay locally. [How to buy](https://neuralinverse.com/how-to-buy/)[Security and trust](https://neuralinverse.com/trust/)[Data processing agreement](https://neuralinverse.com/legal/data-processing/) - **Contracting company:** Contracts and invoices in the US: Neural Inverse, Inc. - **Federal buyers:** SAM.gov Unique Entity ID and CAGE code: \[SAM.gov UEI and CAGE: to be confirmed\] - **Supplier records:** D-U-N-S number: \[D-U-N-S number: to be confirmed\] - **Cloud marketplace:** Buy through AWS Marketplace: \[AWS Marketplace listing: to be confirmed\] Questions ## What buyers in the US ask us first. [All questions](https://neuralinverse.com/faq/) - **Can we keep ITAR-controlled data out of your hosted service?:** Yes. Our hosted service is not offered for ITAR-controlled data. Self-hosted and air-gapped deployments keep controlled designs inside your boundary; whether a deployment meets your obligations is for your export compliance officer to decide. - **Who do we contract with?:** Neural Inverse, Inc., the parent company, incorporated in Delaware. - **When does CMMC apply to our contracts?:** CMMC requirements have been in Defense Department solicitations since 10 November 2025. From 10 November 2026 (phase 2), contracts that involve controlled unclassified information require a third-party Level 2 assessment by default. Your contracting officer and assessor decide what applies to you. - **Is Neural Inverse FedRAMP authorized or CMMC certified?:** We do not claim either. Govern's rule packs check your organisation's own records and keep evidence for your assessor; they do not authorise or certify a service. Our own security documentation is on Security and trust. - **Do you have a SAM.gov registration?:** Unique Entity ID and CAGE code: \[SAM.gov UEI and CAGE: to be confirmed\] - **Can it run with no internet access?:** Yes. Neural Inverse runs air-gapped on networks with no internet connection, using models you host. Ask about Neural Inverse ## Answers from our documentation, with the source for every line. Answers are written by an AI model from our published pages and can be wrong; check the linked page. Your question is sent to Anthropic (Claude API) to write the answer and is not stored by us. Do not include personal or confidential information. [Privacy notice](https://neuralinverse.com/legal/privacy/#assistant) Before you talk to us [Documentation → Install, use, govern and deploy, with every command taken from the product.](https://neuralinverse.com/docs/)[Security and trust → Where your data lives, how it is protected, and how to report a vulnerability.](https://neuralinverse.com/trust/)[Deployment → Self-hosted, in your cloud, air-gapped or hosted by us: what each one means.](https://neuralinverse.com/deployment/) ![](/photos/team.jpg) ## Talk to our team. Neural Inverse is available by request. We work with your engineering, security and procurement teams from the first conversation. [Request access](https://neuralinverse.com/contact/?topic=access®ion=us)[Contact us](https://neuralinverse.com/contact/?topic=sales®ion=us)