Trust · Verticals

Policy templates for regulated industries.

Each vertical gets a recommended residency, provider allow-list, guardrail preset and retention default. Copy the JSON, tune to your DPA, apply to a key.

MVP · join waitlist

healthcare

Healthcare

Applicable frameworks: HIPAA + HITECH (US), GDPR Art. 9 (EU special-category), NHS DSPT (UK), PHIPA (Ontario)
Provider allow-list: OpenAI (BAA), Anthropic (BAA), Azure OpenAI (BAA), Google Vertex (BAA). BAA required.
Guardrails: PHI tokenized on ingress. PII redacted. Prompt-injection block at 0.6 threshold. Content policy: block self_harm, violence.
Retention: Prompts: none. Logs: 30 days in a HIPAA-scoped store. Right-to-erasure workflow enabled.

Policy · Healthcare

{
  "name": "healthcare-us",
  "residency": { "regions": ["us-east-1","us-west-2"] },
  "providers": { "require": ["hipaa_baa","zero_retention"] },
  "data_classes": {
    "phi": { "action": "tokenize" },
    "pii": { "action": "redact" },
    "pci": { "action": "block" }
  },
  "retention": { "logs_days": 30, "prompts": "none" },
  "audit": { "sink": "customer-splunk", "purpose_required": true }
}

finance

Finance

Applicable frameworks: PCI DSS, SOX, GLBA, FFIEC (US); DORA (EU); MAS TRM (SG); FINMA (CH)
Provider allow-list: PCI-scoped providers only. Card data blocked at router; use tokenized references.
Guardrails: PAN detection (Luhn) → block. PII → tokenize. Prompt injection → block. Content policy: none.
Retention: Logs: 7 years for SOX-covered accounts, 1 year default. Immutable audit chain required.

Policy · Finance

{
  "name": "finance-eu",
  "residency": { "regions": ["eu-central-1","eu-west-1"] },
  "providers": { "require": ["gdpr_dpa","zero_retention","dora_ready"] },
  "data_classes": {
    "pci": { "action": "block" },
    "pii": { "action": "tokenize" }
  },
  "retention": { "logs_days": 2555, "prompts": "none" },
  "audit": { "hash_chain": true, "sink": "customer-siem" }
}

public-sector

Public sector & defense

Applicable frameworks: FedRAMP Moderate/High, StateRAMP, CJIS, ITAR/EAR, DoD IL4/IL5, IRAP (AU), G-Cloud (UK), C5 (DE), CMMC 2.0 L2/L3
Provider allow-list: Gov-cloud providers only. ITAR-flagged content restricted to US-persons infrastructure.
Guardrails: Export-control keyword list → block. CUI tokenized. Prompt injection → block. Custom classifier webhook supported.
Retention: Logs: 7 years. Immutable, signed, exportable to agency SIEM. Air-gap deployment via self-host.

Policy · Public sector & defense

{
  "name": "public-sector-us",
  "residency": { "regions": ["us-east-1"], "require_gov_cloud": true },
  "providers": { "require": ["fedramp_moderate","itar_eligible"] },
  "data_classes": {
    "cui": { "action": "tokenize" },
    "export_controlled": { "action": "block" }
  },
  "retention": { "logs_days": 2555 },
  "audit": { "hash_chain": true, "sink": "agency-siem" }
}

legal

Legal

Applicable frameworks: Attorney-client privilege posture, work-product doctrine, ABA Formal Op. 512, EU legal-professional privilege
Provider allow-list: Zero-retention providers only. Privileged-content flag prevents cross-tenant sharing in caching.
Guardrails: PII redacted. Client-identifier tokenized. Cache scoped per matter; no cross-matter reuse.
Retention: Logs: aligned to matter retention (default 7y). Deletion on matter close.

Policy · Legal

{
  "name": "legal-privileged",
  "residency": { "regions": ["us-east-1","eu-west-1"] },
  "providers": { "require": ["zero_retention"] },
  "cache": { "scope": "matter_id", "cross_tenant": false },
  "data_classes": {
    "client_id": { "action": "tokenize" },
    "pii": { "action": "redact" }
  },
  "retention": { "logs_days": 2555, "on_matter_close": "purge" }
}

education

Education

Applicable frameworks: FERPA (US), COPPA (US, under 13), GDPR-K (EU minors), UK Age-Appropriate Design Code
Provider allow-list: COPPA-eligible providers only for K-12. FERPA-compliant BAA required.
Guardrails: Student PII redacted. Age-gating flag; content policy tightened for minors (block sexual, violence).
Retention: Prompts: none. Logs: aligned to academic year (default 365d). Delete-by-student workflow.

Policy · Education

{
  "name": "k12-coppa",
  "residency": { "regions": ["us-east-1"] },
  "providers": { "require": ["ferpa_baa","coppa_eligible"] },
  "guardrails": { "age_gate": "under_13" },
  "data_classes": {
    "student_pii": { "action": "redact" }
  },
  "content": { "block": ["sexual","violence","self_harm","hate"] },
  "retention": { "logs_days": 365 }
}

Can I combine two verticals (e.g. health-fintech)?+

Yes — policies compose. The most restrictive rule wins on each dimension (residency intersection, providers ∩, strictest data-class action, longest retention when compliance requires it).

Do you offer sector-specific SLAs?+

Enterprise plans include named SLAs for healthcare (99.99% + BAA breach terms) and finance (DORA operational-resilience clauses).

Is a defense-grade air-gapped deployment available?+

Yes — via Self-host. Air-gapped mode disables all outbound telemetry and consumes a signed metadata bundle instead of pulling from us.

Country frameworks →DPA / BAA / SCCs →Self-host →