EU AI Act Article 12 enforceable / Day 016 of a 6-month retention window / Penalty €15M or 3% of global turnover

Platform

One record. Every model. Nothing changes for your people.

CLS++ sits between your staff and whichever AI they already use. It captures the interaction, seals it on the device, and writes it to an append-only ledger you can hand to an auditor.

Architecture

Plaintext never leaves the device.

On the device

Capture & encrypt

Extension or MCP client intercepts the interaction, derives keys locally, and encrypts under ZPML before any network call.

CIPHERTEXT
ONLY
CLS++ service

Store, route, search

Encrypted index supports retrieval without decryption. We hold no key capable of reading your content.

SIGNED
EXPORT
Your custody

Recall & evidence

Decryption happens client-side for your authorised users. Auditors receive a hash-chained export in your region.

KEY CUSTODY: CUSTOMER  ·  SERVER READS: NEVER  ·  RETRIEVAL: <50MS CROSS-REGION  ·  INDEX: ENCRYPTED

Capture surfaces

The record is only complete if it covers the browser tab.

Gateways see traffic. Vendor consoles see their own API. Neither sees an employee on a personal login — which is where most of your exposure actually sits.

BROWSER

Manifest V3 extension

47 KB, deployed by group policy or MDM. Detects ChatGPT, Claude and Gemini sessions, including personal accounts on managed devices.

Chrome, Edge · Safari via App Store
DESKTOP & IDE

MCP server

Registers as a connector in Claude Desktop, Cursor and Cline. Agent tool calls and their results enter the same ledger as chat.

Model Context Protocol · stdio + HTTP
SERVICES

REST API

Three endpoints for anything you build yourself — internal copilots, support tooling, batch agents. Any language, any model.

Store · retrieve · delete

Audit console

What your compliance lead actually opens.

Metadata is queryable by anyone with the right role. Content stays sealed until an authorised user decrypts it locally, and that decryption is itself an entry in the log.

LedgerChain integrityResidencyExportsRoles
TimestampActor / surfaceRegionIntegrity
14:02:11Za.mehta · chatgpt.com · personal accteu-west-1✓ e7c1a9
14:02:44Zlegal-agent · mcp · claude-opus-5eu-west-1✓ 4b02fd
14:03:09Zr.silva · gemini · managed acctap-south-1✓ 91da3e
14:03:51Zunderwriting-bot · rest · gpt-5.2eu-west-1✓ c05f77
14:04:20ZEXPORT · Art. 12 · Q3 credit-ops · 4,812 entrieseu-west-1✓ signed