Trust
Trust starts with evidence.
Assess confidential AI governance across your data and conversations in the workflows you intend to use. Review the working controls, their configuration and the evidence they produce, with cryptographic validation stated separately.
Product status
What you can assess today.
Review classification, model routing and audit coverage against your selected version and deployment. Current implementation evidence supports specific workflows; a technical assessment establishes how they operate in your environment.
Working software
Sovrata brings governed files, document search, conversations and Apache Iceberg analytics into one security framework. Supported workflows are implemented in working software for evaluation. Your chosen version, caller identity, enabled services and model endpoints determine the controls available. We distinguish shipped, demonstrated pre-GA and roadmap capabilities in a technical briefing.
Classification and model routing
Administrators enable classification and choose monitor or enforce mode. Document search vectors indexed by Sovrata carry the source file’s effective label. With content routing enabled, governed chats retain their highest established classification and route to approved models. Uncertain classification routes at the user’s highest authorised level. Clearance-based routing remains the default; arbitrary imported vectors require a separate lineage assessment.
Conversation document records
Supported workflows link files and exact versions served to a conversation with its owner and the first and latest delivery times. Repeated delivery updates that record. Covered content routes refuse delivery if the required record cannot be written. These records establish what was served to the conversation, not how the model interpreted or used it.
Inference audit events
Separate, hash-chained audit events record the person, conversation, model, request classification and policy decision for successful requests on supported inference paths. Event emission is best effort after serving and can fail. Document records and inference events have different coverage and guarantees; neither promises a complete immutable event for every action. Prompts and answers are not copied into these inference events.
Confidential inference
Supported inference paths can use authenticated encrypted transport and NVIDIA confidential-computing attestation as separate controls. Protecting data from cloud infrastructure administrators requires the connection and plaintext processing to remain inside the trusted environment. Assess the model software, endpoint configuration and isolation together. Existing hardware evidence covers specific configurations and includes a shared-model timing risk; it is not a universal leak-free guarantee.
Cryptographic validation
For Sovrata’s own cryptographic module: FIPS 140-3 validation in process. Validation has not been completed.
Compliance evidence
Document records, inference events and analytics audit evidence help your team investigate activity and assess how controls were applied. Coverage and event fields vary by serving path. The standards you need to meet, your deployment and your operating processes determine your compliance assessment.
Intellectual property
Sovrata technology is patent pending.
Your data
Custody stays with you.
Sovrata runs on your premises or in your own cloud account. You control the stored data, encryption keys and approved model destinations. An external model receives the content you authorise Sovrata to send to it, so its handling terms and technical controls form part of your deployment boundary.
Sovrata-governed chat controls retrieval and model routing. Outside MCP assistants can receive authorised data within their configured limits, but their own conversations and models remain outside that control. Air-gapped deployments use local services with external processing disabled.
Security engineering
Built by Senetas.
Senetas is an Australian company listed on the ASX (SEN), whose certified encryptors have protected government networks for nearly three decades, with distribution in more than 60 countries. That hardware-encryption heritage informs the team building Sovrata.
Website privacy
Your visit and your choices.
We use Google Analytics and Cloudflare Web Analytics to understand website use. Google Analytics cookies require your consent; limited cookieless measurement continues when you decline them. Advertising consent stays off.
If you enable company identification, Leadfeeder receives your IP address and visit information to help identify the organisation visiting our public website. A company match does not identify an individual employee and may be unavailable or inaccurate, especially on home networks or VPNs. We do not send briefing-form fields to Leadfeeder or use its personal-identification API.
You can choose company identification separately from Google Analytics cookies. Rejecting it prevents the Leadfeeder script from loading. Withdrawing consent stops future tracking in that browser; it does not delete information already collected. Read Leadfeeder’s privacy policy for its handling of data.
Briefing requests are sent to our contact team with the details you provide and available connection and browser metadata. These help us respond to the enquiry and investigate spam or delivery problems. Enquiry contents are not sent to Google Analytics or Peec. Peec measures eligible AI crawler visits and AI referrals separately.
Security disclosure
Raise a security concern.
Found something that needs our attention? Contact us so we can investigate and reply.