Security and trust

Trust is a property of the record.

The platform is built so that what it records can be relied on: who did what, under which authority, on which version — and so that uncertain identity, access or media is refused rather than guessed.

No certification is held or claimed. We do not hold SOC 2 or ISO 27001 reports today. We make no data-residency commitment until it has been reviewed. Security questions from a procurement team are welcome; we will answer them in writing and say where something is not yet in place.

Tenant isolation

Every record belongs to one organisation; reads and writes are scoped to it, and to the locations and role of the person acting. Tested by a dedicated tenant-isolation suite.

Authentication

First-party sign-in with hashed passwords and server-side sessions; multi-factor and step-up re-authentication for sensitive actions; enterprise single sign-on and user provisioning are built, but not yet connected to a customer’s identity provider.

Decisions you can verify

Approvals and other decisions are recorded in an append-only, hash-chained ledger whose integrity can be checked.

Media that fails closed

Restricted originals never fall back into delivery, and sensitive media can be redacted before anyone sees it.

No surveillance by design

No location tracking, screen watching or productivity scoring; transition records structurally cannot hold a rating of a person.

An automated security baseline

Every proposed change to the code is run through dependency auditing, secret scanning, static analysis, container image scanning, a software bill of materials and a database migration drift check.

Responsible AI

AI drafts. People decide.

A model may propose a draft procedure from a recording. It never approves, publishes, signs off or grants an exception. Report suggestions use deterministic rules and call no model at all.

AI-drafted procedure from a recording
A first draft of the steps is proposed from the transcript and frames. It is a draft: a person reviews it before anything is published.
End-to-end generation with a live AI provider has not yet been proven. This is the next proof, not a shipped result.
Built and tested
Owner review and approval
A named person reviews the draft step by step, attests to it, and approves it. Approval and publication are separate acts.
Built and tested
Ask for a report in your own words
Describe the report you want; deterministic rules suggest one, checked against what you are allowed to see. No AI model is called and the question is not stored.
Built and tested
Roles, locations and enterprise sign-in
Organisation, location and role scoping on every record; single sign-on and user provisioning for enterprise identity providers.
Single sign-on and provisioning are built and tested but have not yet been connected to a real customer identity provider.
Built and tested

Pilots and data

Fictional data first. Your data only under an agreement.

Demonstrations and the product tour use fictional data only. A pilot uses an organisation's own data only once written pilot terms and an appropriate data-processing agreement are in place, and only for the scope agreed.

How pilots work