Enterprise
Governance that survives due diligence
For companies that have to answer for every access: tenant isolation at the database, permission per person and per source, an immutable mutation trail, and data on our own hardware in Brazil. What is verified and what is not sits on the same page.
What is verified today, with evidence
Each control below was checked against the code and production configuration on 2026-09-24. The full list, with the verification method, lives on the security page.
Per-tenant isolation (RLS)
Row-level security in Postgres, forced on every multi-tenant table and applied per call. Fails closed when the scope is missing.
Per-source ACL, with validity and reason
Read grants per business domain for a person, role or agent, with valid_from, valid_to and reason recorded. Gradual rollout per tenant.
Immutable mutation trail
Every write records actor, action and before/after state in an append-only table with a hash chain. Changing a row breaks the chain and verification flags it.
Fact provenance
Every fact carries lineage in the W3C PROV-O standard, with a SHA-256 chain per tenant and RDF export for external audit.
Secrets via OpenBao (AppRole)
Engine and SaaS receive credentials from the vault through AppRole at boot. No secret in code or in a versioned variable.
Data in Brazil
Documents, vectors and the database live on our own hardware in Santa Catarina. Embeddings and reranking run on the same machine's GPU.
Documented subprocessors
Every third party is published with what it receives, for what purpose and where it sits — including the inference step that leaves the country.
What has not closed verification yet
No green check and no promised date. Each line says what is missing today.
Read log
Today there is a per-document access counter and an immutable mutation trail. Read logging with identity and version is in development.
Disk encryption at rest
The disk hosting production is not encrypted today. The offsite backup copy is.
SOC 2 certification
No certification today and no promised date. The infrastructure prerequisite is in planning; it joins the roadmap once a contract requires it.
How the enterprise offer works
From R$ 4,997/month, with scope by contract: proposal, contract, invoice and bank slip, with no credit card at any point.
On-prem or dedicated instance
The same engine as the SaaS, on your network (zero third parties inside the perimeter, including the model that writes the answer), or an instance of ours serving only your account. Under contract.
Assisted deployment
Our team deploys alongside yours: Postgres with the extensions, engine, embedding and rerank on your hardware, with retrieval tuning for your corpus before go-live.
Continuous operation
Migrations, upgrades and monitoring together with your team. SLA with response window and escalation defined in the contract, with an account manager.
No counting
People, documents and searches without quotas on paid plans. A quota is what makes a team abandon the tool on the 20th of the month.
Migration and training
Documents, decisions and transcripts that already exist come in through ingestion, without rewriting the past; versioning starts there. Your team learns to run the dashboard and the hooks.
How to buy
Built for corporate procurement, in four steps.
- 1
A 30-minute conversation
We understand the case: document volume, source systems, where the data may live. We leave with a POC scope.
- 2
POC with a contract
A pilot on your real corpus, with before/after benchmarks and sourced answers in your own environment.
- 3
Assisted deployment
Engine inside the agreed perimeter, retrieval tuning and validation with your team before go-live.
- 4
Operation
Active SLA, accompanied upgrades and periodic review of delivered value, measured in the dashboard instead of estimated.
Is your data too sensitive for multi-tenant SaaS?
That is exactly what the enterprise offer exists for. Write to [email protected] or use the contact below; we answer with a proposal within 2 business days.
Control state reviewed on 2026-09-24; the next review follows every infrastructure change.