Trust & sovereignty

Your conversations. Your hardware. Your record. Your jurisdiction.

For the people who have to sign off — security, legal, records, procurement — here is the short version. Sovereignty isn’t a feature we added. It’s how the platform is built.

It runs on your infrastructure.

Your own hardware, your own servers, or a private cloud you own. Full air-gap deployment with zero internet dependency. Built for the organisations that cannot use commercial cloud — because of that constraint, not despite it.

It stays in your jurisdiction.

Complete Canadian data sovereignty by architecture, not configuration. Every deliberation stays within your environment.

People speak freely.

Built around the Chatham House Rule. Anonymous mode strips speaker identity while preserving exact provenance; Speaker-ID mode is available when a project needs individual metrics. You choose, per project.

The record is immutable.

Raw source data is always preserved and never modified — permanent ground truth. Everything derived can be recomputed, but what was actually said stands unchanged. That’s what makes it auditable.

Every answer is accountable.

Outputs are traceable to source through an unbroken chain of custody. You always know what an answer was based on, and you can verify it. This is not a chatbot.

Governed by design.

Gatekeeper role-based access (Viewer / Editor / Admin), PIPEDA and Canadian privacy law, and explicit informed consent required before any capture. Nothing to walk away with, nothing to be trapped by.