Built for the work your CISO has to defend.

Self-host on AWS, Azure, GCP, on-prem, or fully air-gapped. Every Bolt tier and Aeira Federated keep your data plane in your perimeter; Sparcle never hosts your data and never runs your inference. You bring the LLM, under your own provider contract, so nothing routes through us at any tier.

Every query inherits the calling user's identity from your IdP (SAML, OIDC, JWT). Aeira filters in-band on every result; Bolt's pipeline applies policy guardrails before any prompt reaches the LLM. No bypass mode for callers.

When your people reach AI through Bolt's own endpoint, they authenticate with SSO and the provider credentials stay server-side under a per-organisation key. Nobody holds a provider API key, so there is none to leak, share, or take with them, and removing someone from your IdP removes their AI access. Each person sees only the models their role permits, and a model outside that set is refused by name rather than quietly replaced.

On macOS the desktop app reads the configuration profile your MDM pushes, and the browser extension reads managed policy on Chrome, Edge, Brave, Firefox and Safari. Device policy, your server policy and the built-in floor are reconciled by one merge rule with a documented precedence, so two sources cannot quietly disagree. On Windows the app reads Group Policy from the machine tree, and ships ADMX and ADML templates so the settings appear in the Group Policy Editor. Per-user keys are excluded by design on both platforms, so a local user cannot forge managed policy for themselves. What we do not have is a push channel: policy is read when the app starts and reconciled locally, so there is no delivery confirmation back to your MDM.

KMS-enveloped storage with per-tenant key isolation. Provable cryptographic erasure for GDPR & HIPAA obligations. Aeira search seals an audit event for every query it serves, allowed or denied, recording the query, the calling principal, the tenant, and the decision. Per-result filtering detail is not recorded today. Specific KMS posture and crypto choices reviewed under NDA.

Bolt's patent-pending architecture covers the runtime architecture, the priority engine, and the overlay UI. Detailed claim language is shared under NDA.

Every privileged action is sealed into an Ed25519-signed Merkle chain. Export a self-contained proof bundle and an auditor verifies it completely offline, with no database, and nothing from Sparcle, in the verification loop.

Audit events forward straight to Splunk HEC, Microsoft Sentinel (HMAC-signed collector or a Data Collection Rule with AAD OAuth2), or syslog over TCP, authenticated from bolt-api. Forwarding is off until you configure it, and the stdout-to-collector route (Vector, Fluent Bit, OpenTelemetry) stays available if you would rather ship Bolt's logs the way you ship everything else. Either way your security team watches Bolt activity where it watches the rest of the estate.

You run the data plane and the AI inference. Sparcle ships software, updates, and support. Docker Compose for staging, Kubernetes for production HA, air-gap option available. Most regulated buyers start here. From $30/seat/month for Bolt; from $999/month for Aeira Dynamic.

You keep the data plane in your perimeter and you own the model contract. Point Bolt at a local or self-hosted model and no LLM traffic leaves at all; point it at a cloud provider you chose and only the PII-masked prompt goes, under your agreement with them, never through Sparcle. An admin can set a privacy floor: Bolt derives a privacy tier for each endpoint and refuses to build a provider below the floor. The check sits at the egress point every request passes through, streaming and non-streaming alike, so a call path cannot skip it. Leaving the floor unset is the default and means no enforcement, which is the right posture for a trial and the wrong one for production.

No outbound, no inbound, no telemetry. Multi-region VPC or physically air-gapped. License validation via offline-signed token, refreshed on a customer-controlled schedule. Defense, federal, and the most-regulated industries. Custom annual contracts from $500K/year.