What is the difference between proof and a promise?

A promise is a SOC report, a contract, a policy. Proof is a hardware-signed attestation of what code ran, on which data, inside a genuine isolated environment, that anyone can check with public keys and arithmetic. Halten produces the second. Examiners can verify the record; they do not have to take our word.

Does data leave the bank's environment?

No. The query is sent to where the data already sits. Content is not copied outside the perimeter, and processing happens inside a hardware-isolated environment in a US region.

What can the Halten team see?

None of the content being processed. Hardware isolation prevents our team and the cloud provider from opening what is running. What stays visible to us is operational metadata — volume, latency and failures — never the content of a question or an answer.

How does this sit with GLBA and SR 11-7?

Under the GLBA Safeguards Rule the bank remains responsible for customer information; we are a service provider, and the record we produce is the evidence of oversight the Rule expects. For SR 11-7, every answer carries what went in, what ran and who read it, which is the input trail model risk management asks for. Both export in a form your examiners already read.

Do we have to change tools or train the team?

No. The answer arrives inside the Microsoft 365, Copilot and document management already in use. There is no new portal to maintain and no learning curve for the business.

Which cloud does it run on, and where does the data sit?

Isolated execution runs on Azure confidential GPUs: NVIDIA H100s in confidential computing mode, attached to AMD SEV-SNP confidential VMs, in a US region, with data held in the United States. The architecture also supports deployment inside the bank's own Azure subscription where internal policy requires it.

Do you train models on our data?

No. Content is not retained after the answer and does not feed training, fine-tuning or evaluation. What persists is the audit record, which does not contain the content itself.

Who answers to the regulator if something goes wrong?

The bank remains responsible to its regulators, as with any third party it engages under OCC 2023-17. Our role is to supply the technical evidence behind that answer, and to be in the room when the conversation happens.

For banks, lenders and investment firms

Your own 24/7
financial analyst.

Tuned on your firm's own work. Running inside a boundary your data never leaves. Frontier quality at a fraction of the cost.

Talk to a founder →See it work

Supported by

AWS ActivateAmazon Web Services
Microsoft for StartupsMicrosoft
Google for Startups Cloud ProgramGoogle Cloud
Claude for StartupsAnthropic

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    ·                                                                                                                                                            ·  ··  ··  ·                                                                                                                                                    ····  · ···· ····                                                                                                                                           · ·    ·  ··· ····· ······                                                                                                                                         ···  ········· ·······   ···                                                                                                                                      ·· ·· ······· ·················                                                  ·· ·                                                                            ·  ·········· ··· ········ ···· ····                                              · ·····                                                                         · ·········· ·····  · ·······  ········                                             ···    ··                                                                       · ···· ················ ·······□  ·······                                         ··· · ···· ··                                                                    ·········· ·    □···· □·□□□□··□· ·□ ····· ·                                      ·········· · ··  ·               ···                                              ··········□□ ····· ·□··□ □□□· ·□·□□□·□······                                        ····· ··········             ·····  ·                                          ········□ ··□··□□·□□□·□□··□ ·□□□·□□□·· ········                                  ·· ········□□······· ·         ··· ········                                       ········□□···▦□·□□··□□·□□▦□··□ □□▦□▦·□·□□ ········                               ·· ······ □· ·□□· ······     ········ ······· ·                                    ·····□□· ·□□□·□·· □□·□□··□□□·▦ □ ▦·□□□□ □ □··□·· · ·                           ···· ·□··□□□····□·· □····· ·  ······· □·□····· ·····                              ·· ·□·□□□▦□□ □·▦□▦□□···□□▦·▦□▦□■□▦▦□▦···□·▦□□□········· ···· ··                     ··□·□□□···□□□  ·□□□···□· ·  · ·····□□··  ·□········ ·  ·                      ······□· ·□[▦]▦···  ▦□□□▦ □□□·▦▦■□▦▦▦·▦▦·□□□□· □[▦]··□· ···· ·· ······ ··        ···· ··· ·□□ □·□▦▦ ···□·  ···· ·····□□·□□·□□·□□□·□· □············· · ··           ···□□··□□···▦▦□▦ ▦ ·▦▦■■▦□[■]▦■ ■▦▦□□▦ □■□□[▦]▦·□▦□·▦□□ ·□··················· ········□□□· ▦▦ ··□■□■▦■□·  □▦·[▦]··· ·· ·□□▦□ □ □ ·· [▦]□··□·□· ············ · ········□□··□·▦▦▦▦□▦▦▦▦□□□ □▦▦□■□■▦    ■▦▦□▦▦□□[■]▦□▦ ▦[■]□· ··□ □· □··□··   ············ □ ▦·□□▦ □ ▦▦□▦□■■■▦□□▦  ▦▦□ ··□▦· [▦]□ ▦[▦]□▦□▦ □□▦ ·□ □□  □□···□·□···□··· ···□□··▦·□ ▦□▦■□▦▦ ■▦ ■□ □■□▦■□□■[■]   ▦□■■■[▦]■▦■▦▦[■]■□▦▦■□□·□□ ▦ · □·▦·  ▦□·□□□□·· ·▦·□□■▦□□□ ■▦▦□▦▦■▦□■ □□□▦□▦  ··· ■▦■ ▦■□□ ▦□■■■■□□ ▦□ ■▦ ▦□▦▦▦ ▦□▦□· □·▦□▦□▦·□□·· ·□▦□▦■▦□□[■]□■■■▦□▦▦■ ▦□■▦▦□▦ □▦■■ □ □▦□□[■][▦]■□□▦□ □□ □■□▦□□▦·▦ ▦□□□□■■· ▦▦▦▦·▦▦▦▦□[▦]▦[▦]▦□■□▦[■]□□ ■■■ ▦▦■ ■□■▦■■■▦■[▦]▦■□▦□▦▦▦▦[■]□■▦  ■▦■■■[▦]□□[▦]□[▦]■■[▦] ■■▦▦ ▦▦□▦[■]■▦■■▦ □□□[▦]■▦ □▦[■]▦□■■■■■[■] ■ ■□□□□[■]□▦□■▦■▦■▦ ■▦■▦ □▦□▦■□ ■ ▦ ▦▦□■ [■]▦▦■▦[■]▦▦□▦■▦■[■][▦]▦ ■□▦□▦

Northwind Capital · September close · Day 3

Afternoon.What needs working out?

See it work

The interactive demo runs on desktop.

Open this page on a larger screen to try it.

Tuned beats frontieron the firm's own work
Signed recordwith every answer
Zero trustby design

Why private

Same files, two setups.

Your analyst asks one question. Through a shared AI service, copies of the files land in logs, training sets and other companies’ servers. Through Halten, they are read once inside sealed hardware and only the answer comes out.

Same files · Same question

Replay 00:00.0

Question sent

Shared AI service

Reading your files

Copies of your files

4 places · their staff can read them

00:04.0prompt logged · debugging storecopy 1
00:06.0added to training setcopy 2
00:08.0opened by support staffcopy 3
00:10.0forwarded to subprocessorcopy 4

Halten

Reading your files

Copies of your files

0 places · nobody can read them

00:04.0sealed at the boundary · AES-2560 copies
00:06.0attested · AMD SEV-SNP0 copies
00:08.0answered inside the GPU0 copies
00:10.0wiped · nothing retained0 copies

What it's worth

Tuned beats frontier on the firm's own work.

Multi-turn business tasks, run end to end and marked complete or not. A frontier agent on general CRM work, against Halten on a finance firm's own tasks.

Multi-turn business tasks completed

Frontier agents, CRM tasks

35%

Halten, finance tasks

78%

Sources: CRMArena-Pro (2025) · Halten, on a prospective customer's real data (October 2026, 30 tasks)

Agents

An agent for each job your teams repeat.

Browse the agent library

Deal/client intake agent

Logs every new deal and client request, tests it against the mandate and routes it to the right team.

Research and data agent

Pulls market data, filings and recent deals into a sourced brief for the deal team.

Company profile agent

Turns filings and data pulls into profile pages laid out in the house pitch book format.

Financial modeling agent

Builds the DCF, comps and LBO in the firm's own template, with every input sourced.

Strategic narrative agent

Drafts the equity story and case for the deal in the firm's voice, drawn from past pitches that won.

Built for

Deal teams
Partners
Investor relations

What the product does

From the question to the record that clears it.

Domain vocabulary

Has Northwind breached its covenant?

Covenant breachDSCR below 1.20 for two quarters

Settled byCredit Committee minute 14-B

Written asSecond-line finding, exception log

Settled the way this institution settles it.

OutlookTeamsSharePointWhere the answer lands

Re: Northwind · covenant position

DSCR sits at 1.14 for the last two quarters, under the 1.20 floor.

Credit Committee minute 14-B settles it as a second-line finding.

Three sources · core banking, minutes, credit file

Microsoft 365Outlook, Teams and SharePoint

CopilotAsked in the sentence it is needed

Document managementFiled against the matter

One question, three systems

The query travels. The data stays.

Run record14 MAY 2026

Signed record

SR 11-7Model risk management

GLBA SafeguardsCustomer information

OCC 2023-17Third-party risk

signed · 9f41c0…ab27 · retained 7y

One question, start to finish

Cleared before it runs, sealed while it runs, recorded after.

Before→Authorised

The question is cleared

Which source, which fields, which team, which purpose. Policy is checked before anything runs, not discovered afterwards in the incident review.

During→Isolated

The data stays encrypted

Processing happens inside a hardware-isolated environment. Neither our team nor the cloud provider can open what is running.

After→Audited

The answer carries a record

What went in, what ran and who saw it: signed, immutable, and in the format your examiners already read.

Who it's for

Built for the people who sign off.

The business wants to use AI on the data that matters. Risk and security are right to say no. We remove the deadlock by giving the second line the evidence it needs to clear the first.

Risk and compliance leadership

Will this read back at the next exam?

Answers to the examiners, and cannot do it on a supplier's assurance. Needs a trail that survives being read back at the next exam cycle.

Cleared byA signed record per run, retained seven years

Information security

What could the provider have seen?

Needs to know where data went, who touched it, what was retained, and what the provider could technically have seen — not what the contract says it won't.

Cleared byHardware attestation, not a contract clause

Credit and legal

Three weeks and a chain of emails?

Already does this work: cross-referencing a contract against a policy against a history. Today it takes three weeks and a chain of emails.

Cleared byOne pass across contract, policy and history

Technology and architecture

What do we have to stand up?

Does not want another portal to run, another identity integration to maintain, or another silo to keep in sync.

Cleared byNothing new. It runs where the work already is

Team

The right team to build this.

A finance firm is not buying a demo. It is buying the judgement of the people who will be in the room when the security review asks how the thing works.

Gabriel Teixeira
Co-founder · Technical
250+
schools on inkPen, the B2B EdTech he founded at 17, then exited
100K+
users on AI infrastructure he built across five companies
Top 50
MLH Top 50 Hackers '26 · HackHarvard winner '25
Sejal Verma
Co-founder · GTM
3×
founder, building companies since 16
100+
decision makers interviewed to find market fit
Finance
economics at USF, and speaks the language of the buyer

We are not confidential AI infrastructure.
We are the answers your bank can't get today, with proof of who saw them.

Frequently asked

Answered before you're asked.

Get started

Bring us a question that goes
unanswered today.

A real one, from your risk, credit or compliance team. We will show you the path it would take through your systems, and the record that would come back with it.