Where your dossier lives, what your security team can inspect, and the two redlines we will never cross, written down and on the record.
Every claim in the report carries an inline footnote chip that opens its source: the persona, the post, the graph node, the document in your dossier. No assertion stands without an attribution surface.
resolves to: persona · post · node · docEvery report ends with a Diagnostics section: narrative stability, stakeholder balance, evidence depth, the strength of minority views, convergence, persona diversity. The properties of the rehearsal are exposed alongside the conclusions, so your team can judge how much to trust the result.
six diagnostic dimensions, per runOn-premise deployments include full source access for your security review. The engine that writes the footnotes is itself auditable: by your team, on your hardware, behind your perimeter.
on-premise: full source · air-gap-capableThe shape of the engagement determines where the dossier lives, who can read it, and how it leaves at the end.
| Advisory | Cloud | On-premise | |
|---|---|---|---|
| Where the dossier sits | Our EU tenant for the engagement | Your isolated EU tenant | Your network, your hardware |
| Inference location | EU-region (Vertex AI, Frankfurt) | EU-region (Vertex AI, Frankfurt) | Local-only, llama.cpp on your hardware |
| Outbound network calls | To EU inference endpoints only | To EU inference endpoints only | None. Air-gap-capable. |
| Multi-tenant isolation | Per-engagement workspace | Per-tenant, no cross-customer access | Single tenant, your network |
| Dossier retention | Deleted at engagement end + 90 days | Contract term: deletion on request, hard delete on termination | Your retention policy applies |
| Telemetry from your tenant | Operational metrics only, no dossier content | Operational metrics only: no dossier content | None, by design |
| Audit log | Per-run, retained with engagement record | Per-run, retained for the contract term | Local, yours to retain or rotate |
| Source-code review | Walkthroughs on request | Walkthroughs on request | Full read-only access |
Encoded in our company statutes. Not negotiable for any revenue. Refused at the contract stage if the use case crosses the line.
Glasshouse will never be sold to or built for political parties, candidates, campaigns, campaign strategists, PACs, or election-focused consultancies. Non-elected operational government: ministry directors, civil service, regulators, parliamentary research, is the approved counterpart. Governing is not electing; the line is drawn at helping anyone get elected.
No sales to militaries, defence ministries, defence contractors, intelligence agencies, or dual-use intermediaries. No use cases whose success metric involves harming people. The same statutory standing as the electoral redline; the same lack of exceptions.
Want a security review before you talk to us? Send us your questionnaire.