Trust
Your knowledge is the asset. It stays yours.
For a regulated European enterprise, sovereignty is not a preference — it is the condition of being allowed to use any of this at all. So it is where the platform starts rather than something bolted on for the security review.
Deployment
Three places it can run
The same product in all three. What changes is whose boundary it sits inside.
Hosted by us
Most teams, and every free workspace
Multi-tenant SaaS, run on our infrastructure. Fastest to start, nothing to operate, and the option every self-serve signup lands on.
Your own cloud
Data residency, existing cloud commitments
The same platform deployed into your tenancy, so the data never leaves an environment you already control and already audit.
On premises or sovereign
Regulated, classified, or contractually constrained
Your hardware, your network, your boundary. Sales-led — never self-serve — because it is the one place the software itself is installed rather than reached.
Precision, deliberately
Air-gappable, not air-gapped.
Those are different words and we use the accurate one. Cornerstone can run with no network path out — the distillation step runs locally on your own hardware, which is what makes it possible at all.
Whether a given deployment is air-gapped depends on how you run it, and it is a claim about your estate rather than about our software. We will not make it for you.
Encryption and classification are always on
Not a tier and not a toggle. Classification is how the access system works, so there is no configuration in which it is switched off and no edition in which you are without it.
Your model, your contract
Bring your own frontier model and inference stays between you and your provider at your rate. We do not proxy your prompts to resell tokens.
Every fact carries its provenance
Source, author, date and scope travel with the fact. When something turns out to be wrong you can find what rested on it, which is the difference between a correction and an incident.
Facts supersede rather than accumulate
When the organisation changes its mind, the old fact is superseded and dated, not silently overwritten. The record of what was true when remains.
Bring your security team.
The questions they ask are the ones this was built around. We would rather have that conversation early than at the end.