Skip to content

Trust, by design.

Your Council's confidential business and your students' data deserve better than a shared drive.

Encrypted everywhere

TLS in transit, per-tenant envelope encryption at rest.

Row-level isolation

Every query is scoped to your university — in the app and again in Postgres.

Confidential by item

Per-item access, recipient watermarks, remote wipe of offline packs.

AI you can audit

Every agent run logged: inputs, sources, model, prompt version, approver.

Data residency

Choose where your data lives. Zero-retention AI providers where available.

SSO and 2FA

Microsoft Entra ID and Google Workspace. 2FA for secretaries, chairs and admins.

Encryption and isolation

  • TLS 1.2+ in transit; encryption at rest with per-tenant envelope keys for documents.
  • Tenant isolation enforced twice: in application policies and by Postgres row-level security.
  • Automated tests prove no cross-tenant access, including through search and agent answers.

Confidential business

  • Per-item access lists: members only see papers and minutes they are entitled to.
  • Declared conflicts hide restricted papers automatically.
  • Recipient-specific watermarks, download controls and a screenshot-deterrence notice.
  • Offline packs are encrypted on the device and wiped on sign-out or revocation.

Voting integrity

  • Secret ballots store a blind token — there is no link between a member and their choice.
  • Results are sealed until the ballot closes.
  • Recusals are enforced; every vote event is audit-logged.

Responsible AI

  • Every AI output is labelled until a person adopts it; adoption is logged with name and time.
  • Agents act on behalf of a user and can never exceed that user's permissions.
  • Retrieval filters by permission before ranking, so confidential items never reach an answer.
  • AI providers configured for zero retention and no training where available; personal data can be redacted before external calls.

Recordings

  • Recording consent configured per body.
  • “No stored recordings” mode deletes audio once minutes are approved.
  • Confidential sessions pause recording.

Audit

  • Append-only audit log of access, edits, approvals, votes, agent runs, exports and impersonation.
  • Every agent run stores its inputs, tool calls, sources, model, prompt version, cost and approver.
  • Time-boxed read-only audit rooms for external auditors.

Data residency and compliance.

Choose where your data lives. We practise what we sell: our own platform has a documented DPIA.

EU hostingAvailable
UK hostingAvailable
Nigeria-hosted optionIn preparation
ISO 27001 readinessRoadmap
SOC 2 readinessRoadmap
Platform DPIAPublished on request
Request our security pack