The big picture

Who and what are involved, and how do they connect?

One AIEUS installation, an instance, runs on its host's machine and holds separate spaces called modules, which people reach in a browser or through a connected AI app.

AIEUS is a shared workspace where people and AI agents keep files, talk to bots (named AI assistants) and build small apps. All of this sits under one set of accounts and permissions. Keep in mind: AI features such as bot replies, search by meaning and file summaries work only after an administrator connects an AI provider (the service that supplies the AI model). Files and word search work without one.

A module is a self-contained space for a team, project or customer. It has its own files, database, people and Web App (its browser interface). What happens in one module stays there unless someone deliberately connects it elsewhere. Keep in mind: A few things are shared by design, such as one backup that covers the whole installation.

Every instance always has a top module, which AIEUS calls Root, with every other module below it. This means one installation can hold many separate spaces.

Every instance runs on a machine operated by its host: the person or company that installs and runs it. The host, not a module's administrators, runs the backups and handles restores and whole-instance exports. The host also decides where the machine is, whether its disk is encrypted, and the instance's public web address. The Root module's administrators choose only where off-site backups are sent.

Every request from the browser or a connected app rechecks the person's account, and a bot answering them uses those permissions, so all three reach the same things, apart from outside connections an administrator sets up for a bot. Keep in mind: An open browser page's live connection is checked when it opens and is closed within five minutes, so it must reconnect and be checked again. Where shared channels (conversations with several participants) are live, a bot's reply in one, including anything it quotes from the asker's private files, is visible to everyone in that channel.

Exceptions include outside services linked to a bot, which use their own login, and tools, open web addresses or code that can act with a module's own authority. Keep in mind: When turned on, search by meaning and summaries send their provider the text of indexed files, such as notes and code, private folders included. The host, outside every account, can reach the data, limited by the hosting agreement, not the software.