EU AI Act Article 12 enforceable / Day 016 of a 6-month retention window / Penalty €15M or 3% of global turnover

Security

We built it so that trusting us is optional.

Most vendors ask you to believe a policy. CLS++ is arranged so the question doesn't arise: our servers hold ciphertext and no key that can open it. Below are the answers your security review will ask for.

Security questionnaire

Answered up front, before you ask.

Can CLS++ staff read customer content?

No. Content is encrypted on the device under ZPML — a composition of FHIPE, Paillier and additive secret sharing — before any network call. We operate on ciphertext, including for search. There is no internal tool, break-glass path or support process that returns plaintext.

Who holds the keys?

You do. Key material is derived and held client-side. Enterprise deployments can bind custody to your own KMS or HSM, so revoking our access is a change you make, not a request you file.

What happens if you are breached?

An attacker with full access to our storage obtains encrypted records and metadata. That is the design intent — the blast radius of a CLS++ compromise is deliberately bounded to what ciphertext discloses.

Where does data physically reside?

Where you pin it. Records are written to a nominated region and do not leave it. Residency is evidenced in the export, which matters for RBI, SEBI, IRDAI, Indonesia's PDP and EU transfer assessments.

Can the log be altered after the fact?

Entries are hash-chained and append-only. Any deletion or edit breaks the chain and is visible in the integrity view. Deletion requests are recorded as tombstones rather than silent removals, so the record of the deletion survives.

What is the performance cost?

Encrypted retrieval runs under 50 ms cross-region. Capture is asynchronous and does not sit in the path of the model response, so users see no added latency in the tools they use.

Is the approach proprietary or reviewable?

The ZPML construction is the subject of a provisional patent filed in 2026. The architecture brief, threat model and cryptographic design notes are available under NDA for security review, along with current certification status.

Design commitments

Four properties we will not trade away.

Zero-knowledge
The service never holds a key that opens customer content
Append-only
Hash-chained entries; tampering is detectable, not preventable-by-promise
Region-pinned
Data stays in the jurisdiction you nominate, evidenced in export
Vendor-neutral
We sell no model, so we have no reason to favour one vendor's record