Nothing worth stealing. Nothing that can take a fleet down.
We hold no content and run no privileged code.
Five regulations. Stated, not certified.
We claim no certificate we do not hold.
By design, not by omission.
No kernel. No TLS. No root certificate.
Nothing in the product runs below the browser sandbox.
No drivers. No TLS termination. No root certificate.
That removes fleet-outage risk and interception liability. Our working classification sits outside the Cyber Resilience Act's strictest class.
Nothing that breaks this rule ships without a full regulatory review.
Extension
Manifest V3. Distributed only through the browser stores and the enterprise install channel.
Signed builds. Separated tenants.
Signed containers. No secrets in the code.
Tenant isolation is enforced on every object.
Content stays on your device. Labels travel.
Six lines describe everything we hold about your people.
One small model. Nothing else.
The model is 13 MB.
It runs in the browser, and on our server when a document is scanned.
It labels text. It does not generate, summarise or decide.
Three things it never does.
- Send prompt content to a cloud AI service.
- Train on what your people write.
- Decide anything on its own.
A checksum match always beats the model. Your policy picks the action.
Accuracy claims come from a model card.
A completed card, with a held-out test set.
No card, no shipment.
Good-faith research is welcome.
Report it to us directly.
Email security@deltawall.ai. PGP key at /.well-known/security.txt.
- We acknowledge within 2 business days.
- We assess within 7 days.
- We agree a disclosure date with you. Default 90 days.
- No legal action against good-faith research in scope.
The supply chain is checked every build.
- A bill of materials for every build.
- Dependency audit and container scanning.
- Signed releases.
The reporting clock is built in.
We are a manufacturer under the Act and we work to its deadlines.
Read them before the first call.
Works-council pack
Written for BetrVG §87, WOR Art. 27 and the CSE. Suggested clauses included.
Download PDF For the DPODPIA template
You are the controller. Purpose, means, risks, rights, sign-off.
Download PDF For researcherssecurity.txt
Contact, expiry, languages and our disclosure policy.
OpenWhat we hold, and what we do not.
No certificate is claimed here that does not exist.
Not held
Not held
Designed against
Let's talk.
Thirty minutes. You watch the product stop realistic data in a real browser.
- Six leaks: three prompts, three files, live
- The dashboard a security lead sees on Monday
- An evidence pack exported and verified while you watch
- Whether a proof of value in your estate makes sense