Enclave
Intelligence stays inside.

VerbaPulse Enclave runs in your own data center on your own GPU hardware. Draft analysis and the model stay on servers you physically control.

Request access
Illustration · fictional example

Hi Sarah, happy to confirm that the fund will deliver at least 8% this year, so you can plan on that.

CriticalFinancial

Unqualified investment return guarantee enabling reliance by recipient.

More careful wording

is targeting an 8% return this year, but results may vary

The writer decides. The record keeps the risk type and the action, and never the text.

Check a draft →
Runs inYour data center
ModelOn your GPU server
Operated byYour IT team
VerbaPulse accessNone to your environment

Analysis stays inside the line

The VerbaPulse server does not send drafts out; the analysis servers have no outbound route. At runtime, one service fetches Microsoft sign-in keys from login.microsoftonline.com.

Use cases

Client communication in banking

Unqualified promises and confidentiality language are flagged while the text stays on the bank's own server.

Treasury and capital markets

The specialist pass reads financial crime and competition language in internal and external drafts.

Legal and HR correspondence

Sensitive drafts are analyzed on hardware the organization controls.

Who it is for

  • Banks and financial institutions with on-premises requirements
  • Companies that do not allow draft text to reach an external service
  • Organizations in Türkiye that want analysis to stay inside their own servers

Model

The model is gpt-oss-120b, an open-weight model released under Apache 2.0 by a US developer, served with vLLM. Our adapter was trained on synthetic drafts and contains no customer data.

Data handling

Draft text, the flagged phrase, the suggested wording and the model's explanation are not stored by default. Only an event record is written to your database: department, platform, risk type, level, action and time.

Technical details
Stored in your environment
  • Event records: department, platform, risk type, level, action, time
  • User accounts and departments
  • Your policies and NDA records
  • Administrator activity
Not stored by default
  • Draft text
  • The flagged phrase
  • The suggested wording
  • The model's explanation

Security controls

Controls included in the installation, and the tests we have run.

Isolated analysis

Analysis and model containers sit on an internal network with no outbound route.

One port

One published port: 443, with your own TLS certificate.

Deny by default

The edge denies by default: only product paths reach the API; sign-up, payment and marketing routes are closed.

No root containers

Containers run without root privileges.

Signed license

The license is an Ed25519-signed file verified offline.

Honest failure

When the model cannot answer, the result says "not checked". A failure is never shown as clean.

Technical sheet

For your IT and security teams.

Architecture and data flow
  1. The Outlook add-in or browser extension sends the draft to the VerbaPulse server inside your environment over TLS.
  2. The API runs two parallel model calls: a general pass and a specialist pass for financial crime and competition language.
  3. Findings return to the writer with a reason and, where appropriate, a more careful wording. The writer decides.
  4. An event record is written to your database: department, platform, risk type, level, action and time.
Tests we have run

Prompt injection in quoted correspondence
Turkish 81/84, English 51/51. Attacker text in suggestions: 0. Synthetic set, October 2026

Container image scan (Trivy)
No critical findings, no fixable high findings. API image, October 2026

Identity and access
  • Microsoft Entra sign-in for the Outlook add-in, using keys fetched from your tenant
  • Password sign-in for the admin dashboard, with administrator and member roles
  • SAML routes for the dashboard and SCIM routes for provisioning are available. SCIM needs a path from Microsoft's cloud or Microsoft's on-premises provisioning agent
  • Activation tokens valid for 1 to 30 days for users outside single sign-on
Hardware and capacity

12 seconds: about 400. 6 checks per user in the peak hour.

30 seconds: about 1,050. 6 checks per user in the peak hour.

Measured on one NVIDIA H100 PCIe 80 GB card with the full stack running, median email of 571 characters. Larger populations are sized with your team during planning.

Model weights need about 60 GB and the loaded model about 69 GB of GPU memory. Each installation runs on one GPU server with Docker Compose.

Installation and updates
  • Your IT team deploys with Docker Compose on a connected machine: environment file, TLS certificate, model weights, build, provisioning
  • Installation needs internet access for container images and model weights
  • Signed offline license with a 14-day grace period
  • Updates are planned with our team for each release
  • Backups run from the provisioning tool with an integrity check and a signed summary
Outlook and mail compatibility
  • Outlook add-in deployed from a manifest built for your installation
  • Browser extension built with your server address
  • The Outlook client and Microsoft 365 keep their own connections to Microsoft. Office.js loads from Microsoft's CDN
Under your control
  • Content storage is off by default and stays with your organization if enabled
  • Event records remain in your database under your own retention policy
  • A signed, metadata-only CSV export feeds your SIEM
  • Backups are signed. Keep them on encrypted storage
Does anything leave our network?

The analysis servers have no outbound route, so draft text stays on your VerbaPulse server. One service fetches Microsoft sign-in keys from login.microsoftonline.com. If you need no outbound connection at all, Black is the edition for you.

What is the difference between Sovereign and Enclave?

They are the same software. Sovereign runs in your private cloud or cloud tenancy. Enclave runs in your own data center on your own GPU hardware. Choose by where your infrastructure lives.

Is draft text used to train a model?

No. The model runs in your environment and VerbaPulse has no access to your drafts. Our adapter was trained on synthetic data.

Does VerbaPulse give legal advice?

No. It raises compliance risk signals and offers more careful wording. Your legal and compliance teams keep their review and their decisions.

Which languages are measured on this deployment?

Turkish and English. Talk to us if your teams write mainly in another language.

Compare the editions

SovereignEnclaveBlack
Where it runsYour private cloud or your own cloud tenancyYour data center, on your own GPU hardwareAn isolated network with no internet path
Model locationOn your GPU instance in that environmentOn your GPU serverOn your GPU server
Analysis pathAnalysis servers have no outbound routeAnalysis servers have no outbound routeAnalysis servers have no outbound route
Outbound connectionOne: Microsoft sign-in keys (login.microsoftonline.com)One: Microsoft sign-in keys (login.microsoftonline.com)None
IdentityMicrosoft EntraMicrosoft EntraActivation tokens, your internal identity provider
UpdatesScheduled with our teamScheduled with our teamSigned offline packages with automatic rollback

Plan your deployment with our team.

We start with a technical discussion about your network, identity provider and user count.

Plan a conversation