Trust
What Aegis can prove, and what it cannot.
Aegis does not ask you to trust us. It gives you a file that anyone can check on their own, with the code in plain sight.
The project has no customers to cite yet. That is why this page does not lean on logos: it leans on what you can check yourself.
How a third party checks it
With the evidence file and the verifier that ships with the product. No connection, no call to us, no permission from us.
- 01
They receive the file
You hand over the evidence file for the period to be reviewed. It does not pass through us.
- 02
They run the verifier
The tool works offline and its code is public (AGPLv3): anyone can read what it does before using it.
- 03
They compare the fingerprint
The verifier recalculates the fingerprint of each record (a code that changes if the text is altered) and compares it with the reference kept separately. If something changed, it will not match.
If someone rebuilds the whole chain, it stops matching the reference fingerprint a third party kept earlier. Aegis detects tampering; it does not prevent it.
See the code on GitHubWhat Aegis does not do
Saying it is part of the product.
It does not stop someone writing something else in their own system.
Aegis watches the records that pass through it. An email, a document or a different system can say anything, and Aegis has nothing to do with it.
It does not replace a backup.
If the evidence file is lost, there is nothing left to verify. Keep copies, as with any record you need to preserve.
It does not decide what is correct.
It records faithfully what the AI answered. It does not judge whether that was true, useful or lawful.
It does not exempt you from the law.
It provides evidence that can serve in an audit. The obligation, its interpretation and any certifications remain with your organisation.
Where the data lives and who can see it
On your infrastructure, not ours.
- Where
- On the servers or cloud you choose. Your AI traffic does not pass through us: it stays on the infrastructure you operate.
- Who
- Anyone with access to that server and to the keys you control. We keep no copy of the evidence: we have no access to it.
- How long
- You decide what is kept and for how long. By default it keeps fingerprints of questions and answers, not the text.
Under the law, a fingerprint can still be personal data. Treat it with the same care as the text.
Reporting a security problem
Write to security@aegislatent.com with what you found and how to reproduce it. You do not need to be a customer.
security@aegislatent.comWe ask for a reasonable period to fix the issue before the details are published, and we coordinate publication with you.
The documents
The full terms, with no small print that contradicts them.
Check it with your own data.
The free plan includes full verification. You do not need a demo from us.