For organizations · Teams · Enterprise
AI your organization can actually deploy.
The privacy-first AI platform for hospitals, law firms, financial services, and any organization where AI use is gated by confidentiality, compliance, or regulatory exposure.
Architecture at a glance
01 · Client device
User-held keys (FIDO2 or Argon2id passphrase) at Executive and above.
02 · Hybrid TLS 1.3 + ML-KEM-768
Post-quantum key exchange; resists harvest-now-decrypt-later.
03 · Application server
Relay only for Sovereign tier — no plaintext ever touches the app server.
04 · NVIDIA H100 TEE (GCP A3 CVM)
Confidential-computing enclave. NRAS attestation per session, tenant-verifiable via nvtrust.
05 · Model + memory inside enclave
AES-256-GCM encrypted memory, user-scoped. Inference runs inside the attested enclave.
06 · Signed audit log
Ed25519-chained, tamper-evident, metadata-only. Exportable at any time.
Every conversation is encrypted end-to-end with post-quantum key exchange, processed inside a hardware-isolated enclave that even we cannot read, and bound by a signed audit trail you can export at any time. Keys are user-held at Executive and above — compromise our infrastructure without compromising the user, and the ciphertexts are still useless.
Compliance & security
HIPAA BAA
Template in counsel review. Available to Teams Executive and Enterprise applicants upon completion.
SOC 2 Type II
Observation window underway. Type II report expected Q3 2026.
ISO 27001
On Q4 2026 roadmap for international and European family-office buyers.
Independent pentest
Scheduled Q2 2026. Executive summary available to Sovereign and Enterprise applicants under NDA on completion.
Cryptographic review
Independent review of the ArcaKey cryptographic architecture scheduled Q2 2026.
PHIPA alignment
Canadian data residency via GCP Montréal (northamerica-northeast1), capacity subject to confirmation. Full PHIPA alignment memo in Q2 2026.
Organizational capabilities
Administration
- Organization admin consoleSeat management, retention policy, audit-log access. Administrators manage deployment but cannot read user content.
- Centralized billingOne Stripe invoice per organization, per-seat subscription model.
- Signed audit log, org-levelEd25519-signed, tamper-evident, metadata-only. Exportable for internal audit, regulator response, or ethics-committee review.
Identity and access
- SSO / SAML (Teams Executive+)Okta, Azure AD, Google Workspace, Microsoft Entra.
- Role-based memory policies (Teams Executive+)Admin-defined retention defaults per role.
- FIDO2 hardware keys (Executive+)Passphrase-derivation fallback with Argon2id.
Dedicated deployment
- Single-tenant infrastructure (Enterprise)Per-customer GCP A3 CC pool with customer-bound network isolation.
- Custom retention and audit policies (Enterprise)Specific to your compliance framework and internal governance.
- Named implementation engineer (Enterprise)Not sales-services theatre — an actual engineer you can reach on Signal during onboarding and escalations.
Pricing for organizations
Teams Professional
Small practices, boutique firms
$399/ seat / mo
5-seat minimum
- Everything in Professional, plus:
- ·Org admin
- ·Centralized billing
- ·Org-level audit log
- ·BAA available on completion of counsel review
Teams Executive
Hospital departments, mid-size firms
$1,199/ seat / mo
10-seat minimum
- Everything in Teams Pro, plus:
- ·SSO / SAML
- ·Role-based memory
- ·Named CSM
- ·BAA standard (upon counsel-review completion)
Enterprise
Hospitals, health systems, multi-office firms
from$1,199/ seat / mo
25-seat minimum, negotiated
- Everything in Teams Exec, plus:
- ·Single-tenant infra
- ·Custom retention
- ·Implementation engineer
- ·On-call security
- ·Dedicated support SLA
Individual tiers (Professional, Executive, Sovereign) are on the /pricing page.
The evaluation pack.
Architecture overview, security controls matrix, HIPAA BAA template (on request), and a 30-minute demo with the founder — available to qualifying organizations.
Request evaluation pack