Security & diligence
Two rules, both built into the machine itself.
Nothing sensitive leaves the building; nothing happens outside the firm without a person. Neither rule is written into the AI's instructions.
Data boundary
Nothing sensitive leaves the building.
One door out of the machine — everything through it is recorded, and anything on your never-send list is refused.
the record of what leaves →Action boundary
Nothing happens outside the firm without a person.
Before any send, submit or change, the machine stops — and the AI cannot talk its way past it.
the run record →The machine, the keys, and who holds them
If a claim cannot be checked on your own machine, we do not make it here.
It starts only on approved software
At every start, a security chip checks the software — the machine runs only what we signed and audited.
A stolen machine gives up nothing
The keys that unlock your data are locked to that one machine's security chip — a thief gets only scrambled data.
Your data is locked, and you hold the keys
A backup drive stays in your office, and if you ever leave, we delete everything in front of you.
Updates arrive sealed, and never install themselves
Each update's seal is checked before anything runs, and you can stay on a version you trust.
One door out, and everything through it is recorded
A built-in stop guards the door: anything on your never-send list is refused, even if the code-word step fails.
No way in
No remote log-in, no maintenance tunnel, no back door — we get only a simple health signal, never your files.
EGRESS PROXY · LIVE LOG
today · 5 payloads · 1 refused (canary) · 0 entities out
TIME · RUN · BYTES · TRIPWIRE · VERDICT
- 03:41:22 #4,811 1,204 B pass forwarded
- 08:02:10 #4,819 968 B pass forwarded
- 09:14:55 #4,822 1,411 B pass forwarded
- 09:51:03 #4,826 742 B pass forwarded
- canary test — 2,140 B HIT refused, logged
— inbound: 4 signed update manifests, verified
PAYLOAD 03:41:22 · IN FULL
{ "task": "compare_candidates",
"role": "[ROLE_2]",
"client": "[CLIENT_A]",
"budget": "[AMOUNT_7]",
"ask": "which profile fits, and why" } no names · no figures · no filenames the key to the code words stays on the machine
An illustrative log — no client data. The structure is exactly what a real log looks like.
For departments of larger companies.
A Midas is a capital purchase, not a data-sharing agreement. No new cloud vendor to review — nothing is transferred, and it works with the internet cable unplugged.
- Your IT department holds the keys, decides where the machine stops, and reads the record of what leaves.
- Legal, HR, finance and research teams run their own workflows on their own unit.
- Departments scale the way the machine does — by adding another.
Claim discipline
What we will and will not claim.
Certain protection, by design, for details with a fixed pattern; layered protection beyond that; a physical stop behind both. Zero leaks across all testing to date, and a record of everything that has ever left, open to your inspection.
We will not tell you the system is unhackable or that privacy is guaranteed. Any vendor who says so is selling you a sentence, not a safeguard.
DILIGENCE PACK — WHAT YOUR IT TEAM RECEIVES
- Network diagram, with the machine's one route out marked
- Signed export of the record of what left, for any date range
- Start-up integrity record from the machine's own security chip (TPM)
- How the tests were run, the full list of protected details, and the canary results
- Where the machine stops for a person, workflow by workflow
- Backup, key-holding and replacement-unit procedures
- Deletion procedure, with proof that what the machine learned has been removed
What you were about to buy instead
A place to record the work, or the thing that does it.
The real comparison is not another AI product — it is the stack of per-seat subscriptions already on the quote.
A stack of per-seat subscriptions
- Software your people type the work into
- Priced per seat, per module, per year
- Data held by each vendor, on their terms
- Several vendors, shared accountability
- Your people still do the work; the system remembers it
Midas 1 — a machine you own that does the work
- The machine works those systems for your people
- Ready-made workflows for your trade, kept on the machine with every change tracked
- Limits built into the hardware, and a record of everything that has left, open to inspection
- What it learns from your team stays with you, and can be deleted
- One machine, one managed service, one accountable party
The software you were about to buy is a place to record the work. This does the work.
It is also a fraction of the price. That is the second argument, not the first.
Send your IT lead. They can read the record themselves.
We'll hand over the diligence pack in the session, not three weeks later.