Security and control: what stays on your machines, and how you check it
What stays on your machines, who sees what, what AI may do, what is recorded and how you leave with everything.
DataBridge is installed on hardware you control, and each person sees only what their role allows. This page sets out what stays where, what AI may do, what is recorded and how you leave with everything.
It starts with a demo on a sample of your own documents and data.
For your security review
- Deployment
- Installed on hardware you control.
- Where your data lives
- On your machines. In the on-premise setup nothing is uploaded and nothing connects out.
- What can leave, and who approves it
- In the on-premise setup, nothing leaves unless a person approves it: drafted emails go out only after approval. Facts an AI suggests wait for a person to confirm them.
- Confidential material
- Kept in a separate store with a key of its own.
- Suppliers behind this website
- Listed on the sub-processors page. Sub-processors
- Security contact
- Write to outreach@walnut.sg. The contact is also published at /.well-known/security.txt. Report a vulnerability
Your IT, privacy and vendor-risk reviewers receive the full architecture sheet before anything is installed.
What is installed on your machines
The shaded box holds your data. Your sources feed it, the AI model you choose proposes, and the people who approve decide.
Step through the six controls, from where it runs to how you leave with everything.
Your data stays inside your walls
Where it runs
Runs on your machines: installed on your own premises, nothing is uploaded and nothing connects out. Your choice of model: use the AI model you prefer, or use none.
Who sees and decides
Access by role: each person sees only what their role allows. A person confirms what AI proposes: drafted emails go out only after approval.
What you keep
Every version is kept: corrections add a new version and keep the old one. Leave with everything: export the whole record in standard formats.
Connections out of your network
When it is installed on your own premises, nothing is uploaded and nothing connects out.
Each control in more detail
Who sees what
Each person sees only what their role allows. Your administrators set the roles once, and access follows each person's role from then on.
Confidential material in a separate store
Confidential material is kept separately, locked with its own key.
A person approves what AI proposes
A fact the AI suggests waits until a person confirms it, and a drafted email goes out only after approval. Each confirmation is recorded with its date.
Every version is kept
A correction adds a new version and keeps the old one. You can read what the record said on any past date.
What is recorded
Each use of AI is recorded, and recorded values are never overwritten.
Leaving with everything
Export the whole record in standard formats, and we restore it into a fresh system in front of you, so you can see nothing was lost.
What your reviewers receive
Your reviewers receive the full architecture sheet before anything is installed. The disclosure policy and the model use statement are on this site.
Installing and running DataBridge
We set DataBridge up on your machines and connect it to your sources during the pilot.
How this website itself is run
The contact form sends your message as one email to one inbox, and that inbox is where it is kept.
How this website itself is run is set out in the Technical overview.
It starts with a demo on a sample of your own documents and data.