Trust and security

Your name, your numbers, your edge. Stay yours.

How we handle your data, how AI is kept under human control, and what you own. Written for the people in your business who have to say yes.

moonAlways facing you
The Moon
AI governance

AI drafts. A named person decides.

Automation that acts on its own, with no one accountable, is the risk. We design every system so that cannot happen.

Human approval

Nothing an AI agent drafts takes effect until a named person approves it.

A full decision log

Every draft, approval, edit and decline is recorded with who, when and why.

Clear limits

Each agent has a written scope: what it may read, what it may draft, and who approves.

Your data is not training data

Your records are used to run your system. They are not used to train shared models.

The approval loopEvery agent, every time
AIDrafts the next step

Inside a written scope: what it may read and what it may draft.

PersonReviews the draft

A named approver sees the draft and the reason behind it.

DecisionApprove, edit or decline

Nothing takes effect before this point.

LogRecorded

Who decided, when and why, for every draft.

Saturn and its rings
The decision logEvery action, on record

Nothing leaves orbit.

saturnIts rings hold everything in line, like your audit trail
DECISION LOG · TODAY09:12 · AI drafted purchase order ₹4.2L09:20 · Edited by Stores manager09:21 · Approved · reason recordedNothing changed without a name beside it
Without itNobody can say who changed a record, or why.What you getA complete trail an auditor can read without you in the room.
Your data

Kept where you need it, seen only by who should.

Where it lives

Hosted in the region your regulators and customers expect, or on your own servers.

Encryption and backups

Encrypted in transit and at rest, with regular backups and tested restores.

Access

Role-based access for your team, single sign-on where you use it. Our staff access your system only with your consent, and that access is removed when the work ends.

Audit trail

Changes to records are logged automatically. Corrections add a new entry; the original stays visible.

Compliance

Built for the rules your industry is held to.

AreaWhat we design for
Data protectionUK GDPR and India’s Digital Personal Data Protection Act 2023. A data processing agreement is part of every contract.
CareCQC key questions and the NHS Data Security and Protection Toolkit.
PharmaGMP, 21 CFR Part 11 and EU Annex 11 for electronic records and signatures.
ManufacturingIATF 16949 traceability, GST e-invoicing.
Ownership and exit

You are never locked in.

You own your data

Export it in standard formats whenever you ask.

Terms agreed up front

Ownership and licence terms for the system are in the contract before work starts.

A written exit plan

Documentation and handover, so another team could run the system.

Private by design

Most of our best work runs under NDA.

We sign yours before any detail is shared. Qualified teams can review masked versions of live systems privately, once the fit is clear.

Questions from IT and procurement.

Can we have a security questionnaire completed?

Yes. Send it to us and a principal will complete it with our engineering lead.

Can the system run inside our own network?

Yes. We deploy to a private cloud or to your own servers, as your policies require.

Who at &n can see our data?

Only the people working on your system, only with your consent, and their access is logged.

What happens to our data if we stop working together?

We hand it back in standard formats and delete our copies, in line with the contract.

Where it starts

Every engagement begins with a two-week diagnosis.

One workflow, two weeks. You keep the map either way.