
The page your security team is looking for.
Written for the person who has to sign off. Where something is not yet in place, it says so and gives the date. Last updated 6 September 2026.
In an on-premise deployment, nothing leaves.
No document leaves the perimeter. No file trains a shared model. Only configuration and telemetry cross the boundary, outward.
No outbound path for content
Documents and extracted data never cross your network boundary.
Inference inside your walls
Open-weight models on your hardware. No third-party provider receives your content.
No training by default
Nothing improves anything outside your instance without a written data-rights agreement.
Retention you control
Configurable to your schedule, including regulator-mandated holds.
Provenance on every action
Document, page, model, version, rule, timestamp, human.
The question behind the question
Anyone can run on-premise now. Ask whether the governance stack survives the move. Ours is the same system.
Where we are, honestly, as of 6 September 2026.
If a trust page shows only green, either the vendor is older than us or the page is not telling you everything.
| Item | Status | Detail |
|---|---|---|
| SOC 2 Type I | In progress | Report targeted November 2026. Bridge letter on request from that date. |
| SOC 2 Type II | Scheduled | Observation window starts after Type I. Report targeted mid-2027. |
| Penetration testing | Scheduled | First third-party test late 2026; summary under NDA, annually. |
| ISO 27001 | Planned | Programme begins after SOC 2 Type II. |
| Access control | Available | RBAC, SSO, approval gates per process step. |
| Audit logging | Available | Immutable, exportable log of every agent action and human intervention. |
| On-premise deployment | In production | Running today at a supervised commercial bank on its own hardware. |
| Sandbox isolation | Available | Dedicated kernel + eBPF, <60 ms boot. |
| Proxy for agent egress | In production (internal) | Customer GA 2027. |
Built to be reviewed by people whose job is to say no.
Model-risk management, not model marketing.
Confidence scoring
Every field, every decision, configurable thresholds.
Evaluation harness
Quality measured, not asserted.
Approval gates
A human wherever your policy requires a signature.
Decision lineage
Document, page, model, version, rule, reviewer.
Bounded autonomy
No action outside the scope defined for each process.
Intellectual property
Patent application filed, Vietnam IP Office 1-2025-01705. Your data and corrections remain yours.
Privacy, briefly.
This site sets no advertising or analytics cookies. The only personal data it collects is what you type into the contact form — stored in our own Cloudflare account, read by one person, deleted on request. Fonts load from Google Fonts. The full privacy notice →
Security questionnaires, in 48 hours.
A maintained answer library covering the common frameworks. Architecture, data-flow diagrams, sub-processor list, BCP and incident response available under NDA.
Put AI agents to work with Densery.
One process first, live in under three weeks, with the evidence from day one.