SECURITY & TRUST

Autonomy needs boundaries, not just good prompts.

FormalEngine is built local-first. Cloud may coordinate; the local node enforces policy, authority and egress boundaries for local resources.

LOCAL BY DEFAULT

Local By Default

Raw files, secrets, local repositories, sensitive project data and comprehensive memory stores stay local by default.

SYNC BY POLICY

Sync By Policy

Only explicitly released content and minimised metadata are synchronised.

AUTHORITY A0–A4

Authority A0–A4

Observe, internal action, reversible external action, material action and explicit-only action are separate authority levels.

POLICY-GATED EGRESS

Policy-Gated Egress

Premium cloud models receive only the context allowed by the active policy for the relevant data class.

HUMAN APPROVALS

Human Approvals

Material actions such as payments, production deployments or sensitive communication pause for defined human approval.

AUDIT EVIDENCE

Audit Evidence

Run, model, tool, approval and verification evidence makes decisions inspectable.

KILL SWITCH

Kill Switch

The operator can stop new mutating actions without losing previously generated evidence.

NO CERTIFICATION CLAIMS

No Certification Claims

FormalEngine currently claims neither SOC 2 nor ISO 27001. This site describes only implemented or frozen architectural principles.

DATA BOUNDARY

LOCAL BY DEFAULT / SYNC BY POLICY

Cloud metadata is minimised. Raw uploads, memory synchronisation and sensitive model use are not implicit defaults.

ENFORCEMENT

actor + action + resource
+ data_class + budget
+ risk + context
          ↓
ALLOW | DENY | REQUIRE_APPROVAL
REDACT_AND_ALLOW | DEFER

Private beta · limited onboarding cohorts

Your company. Less headcount. More control.

We are onboarding a limited number of companies per cohort. Waitlist members receive a 30% founding-customer discount for the first 12 months. Not combinable with annual savings.

30% off / 12 months
Not combinable with annual savings.