Privacy-first AI infrastructure.

← Velum for organisations

What a security review asks.

What the console holds and what it cannot, the three deployment postures, and the answers your reviewer will want in writing.

What the console holds, and what it cannot

Detection runs on the device, so there is nothing to forward. Managed deployments renew a licence lease; that request carries the tenant, a salted subject hash, a salted device hash, the product version and the policy hash. The schema is printed in the console and in the app's own Protection tab, and offline deployments make no request at all.

classwhat it isin the console
Seats and devicesA hashed subject, a hashed device id, the platform, the app version, the policy hash, the last renewal.Held
Aggregate countsHow many identifiers were protected, of which types, on which surfaces, per day. No subject attached unless you turn that on.Held when you enable reporting
Anything from the work itselfDocument text, filenames, prompts, sites visited, mapping values, per-item records.Never received

If you need a record of what an individual masked, Velum is the wrong product and we will say so on the call. Devices can write their own detection records to a collector you run, where that data stays yours.

Three postures. The masking path is offline in all of them.

Offline

No callbacks, at all

An organisation key and a signed policy arrive through your MDM. Devices verify both locally and never contact anything. Seat counts come from your own device inventory, and we ship the Jamf and Intune queries that produce them.

Air-gapped estates, public sector, anyone whose review forbids vendor traffic.

Managed

The default

Devices renew a short licence lease, 30 days by default and yours to shorten. Removing a person ends their access at the next renewal, which is the revocation window you quote in a security questionnaire. Masking itself still makes no network call.

Most organisations, and the only posture where the console can tell you a seat went idle.

Self-hosted

Your network, your logs

The lease service runs as a container inside your perimeter, holding a delegated key scoped to your organisation. Endpoints renew against your own hostname, and you can read the request logs yourself rather than take our word for the schema.

Banking, defence, and anywhere the answer to "what leaves" has to be verifiable by you.

Questions a security review asks

Can we deploy Velum through our MDM?

Yes. The console generates the configuration for Jamf Pro, Intune on macOS and Windows, Chrome and Edge policy, Firefox policies.json, Group Policy and a plain config file for Linux and containers, each carrying your tenant and your signed policy. The licence and the settings arrive before a user opens the app.

What does the admin console see about our staff?

Seats, devices, app versions and the policy hash each device reports. It never receives document text, filenames, prompts, sites visited or mapping values, and there is no setting that enables that. Aggregate counts of identifiers protected are reported only when you turn reporting on, and per-user reporting is off unless you enable it.

How do we remove someone's access?

Managed deployments renew a short licence lease, 30 days by default and configurable per tenant. Revoking a seat ends masking at the next renewal, so the lease window is the revocation time you can quote in a security review. Unmasking is never gated, so nobody loses access to data they already masked.

Can Velum run with no connection to you at all?

Yes. In the offline posture an organisation key and a signed policy arrive through your MDM and devices make no requests whatsoever. Seat compliance is contractual, reported from your own device inventory. A self-hosted option runs the lease service inside your network instead.

Is the console available today?

No. It is in development and we are running it with pilot customers, which is why every screenshot on this page is labelled as such. The desktop app, browser extension, loopback service and the Atlassian app for Jira and Confluence all ship today. The CLI is written and not released yet.

How is it priced?

Individual licences are 149 US dollars per year for one person on one machine. Team is the same per seat per year, from a minimum of 2 seats up to 25. Business and Enterprise are priced on request, on volume from 25 seats, and Enterprise bills on a purchase order.