Security & provenance
A number you cannot trace is a rumour with a decimal point.
The point of the product is not that it answers quickly. It is that every figure in the answer can be resolved back to the record it came from — and that the resolving is done by code the model cannot call or skip, not by asking the model whether it was careful.
How a figure is verified
Provenance is verified, not requested.
Every cited source id is resolved back against the connector that claims it, before the answer is shown. Only an id a connector actually surfaced resolves. An id that does not resolve is marked, and the whole answer is flagged as not auditable end to end — a broken trail does not mean the number is wrong, it means you should not send it anywhere until it resolves.
Tools return a receipt id even for an empty result, so a question with no matching records still has something legitimate to cite. Without it, a model fills the gap with a plausible-looking id. This is enforced by tests; it is not a setting.
The connection
Read-only credentials, scoped per domain to the specific tables, endpoints or exports it needs. The permitted calls are declared up front and enforced by the runtime rather than by convention. No connector may declare a write scope, and a write is refused before the request leaves.
Records are read at query time and used to compose the answer. Source data is not copied into a warehouse or used to train models. The answer, its provenance and the record ids it cited are retained so it can be audited later — reconstructing a figure six months on does not require holding your data to do it.
Two separate axes. An access role — viewer, member, admin — decides what a person may change. A business title decides which domains a specialist may read on their behalf. Neither is something a person can set for themselves, and both are re-checked behind every endpoint, so calling the API directly gets the same refusal the interface implied.
Every request is resolved to one company before anything is read, and every query is scoped by it — connectors, documents, vocabulary, spend and people alike. There is no query in the system that could be scoped by something else and reach across. The operator role that can move between tenants for support is set in the deployment environment, not stored as data, so no administrator inside the product can grant it to themselves.
Microsoft Entra ID. Your directory decides who exists; revoking someone there revokes them here. The ID token is verified — signature against the tenant's published keys, plus issuer, audience, expiry, nonce and tid — never merely read.
Every question retains its routing decisions, sub-questions, domain responses, resolved definitions, cited ids and verification outcomes. An answer from months ago can be reconstructed exactly as it was shown, for whoever it was shown to.
Hosted, or in your own cloud account for organisations that need records to stay inside their own perimeter. Both run the same architecture.
Certification status and the current sub-processor list are available under NDA. Ask for the security pack on the demo call.
What it will not do
Refusal is a feature, said out loud.
Invent a number it could not find
A question nothing connected can answer comes back unanswerable, naming what is missing. There is no nearest guess.
Hide a disagreement
Two systems that disagree produce a stated answer and the reason for it, never a quiet midpoint.
Present an estimate as a fact
A projection is marked as one, for its whole life, and always carries the assumptions it rests on.
Use a stand-in without saying so
If the part of the business that owns a term is not connected, the answer names the substitute and how it differs.
Claim a cause it has not established
Three things moving together is said to be three things moving together, unless the evidence shows one caused another.
Write to your systems
Every connection is read-only by construction. A write is refused before the request leaves.
See the provenance walked on one of your own figures.
Forty minutes, one read-only connection, your question asked live — and every id in the answer resolved in front of you.
Request a demo