Proof, not promises.
Every action is recorded in a SHA-256 hash-chained audit trail, verifiable end to end. Sovereign, traceable, deployed on your premises. Touch one line and the chain knows.
- On-premise
- AI Act & GDPR by design
- SHA-256 audit
- No plaintext prompts
Change a single line: the whole chain breaks, and the log proves it.
What SmartAGT handles, end to end.
Security is not a toggle: it is wired into the product.
A glimpse of the foundation, not an exhaustive list.
Aligned with the frameworks that matter.
An honest posture, pitched at the level a first CISO read needs. The control-by-control detail lives in the compliance pack, on request.
Logging, transparency, human oversight (Art. 12/13/14). Art. 50 in progress.
Minimization, right to erasure, encryption, pseudonymization. Vendor = processor.
Govern, Identify, Protect, Detect. Maturity framework, not certifiable.
Technically aligned; certification in preparation (ISMS, SoA, COFRAC audit).
Model lifecycle and human oversight in place. Certification planned.
Privacy extension of the ISMS, aligned. Prerequisite: 27001 certification.
Deployable on qualified infrastructure; certification on the host side.
SmartAGT is not yet third-party certified: technical alignment is in place, certification is on the roadmap.
No matter the model, your data stays sovereign.
SmartAGT runs inside your perimeter. The model provider is your call: 100% local in air-gap (zero egress), or a SaaS LLM. And even then, personal data is anonymized before any outbound call.
SmartAGT
In 100% local mode, nothing ever leaves your infrastructure: the model runs on your side. SmartAGT anonymizes the data before every outbound call.
email.send to 312 recipients. Side-effect action.Confirm sending the email?
Tool email.send · EXECUTE level · 312 recipients. Nothing runs without your approval.
AI proposes. A human decides.
Every side-effect action is deterministically paused before execution. The operator approves or refuses, and the decision is recorded.
-
Deterministic pause
WRITE and EXECUTE actions stop dead. No randomness, no silent exceptions.
-
Preview card
The operator sees exactly what is about to happen before confirming.
-
Recorded decision
Approval or rejection lands in the audit chain, with the human actor.
