Trust
Trust you can verify
graal Data Platform and graal Agentic Platform run on your infrastructure, with your identities and under your rules. Everything that happens there can be reviewed, and nothing leaves without you. This page gathers what your security, compliance and data protection teams will check.
The model
You operate. graal installs without privileges. Nothing leaves.
graal Data Platform and graal Agentic Platform are two pieces of software you install: they hold neither your data nor your identities, and they require no administration rights on your cluster. Independent, they share your company’s SSO and the same audit conventions.
Every action, whether it comes from a person or from an AI agent, goes through permissions defined per project and leaves a record in the audit trail.
Both platforms are open source, under the Apache 2.0 license.
Responsibilities
Who does what
How responsibilities are split between the vendor, your organization and, if you choose one, your hosting provider.
| Area | graal (vendor) | You | Your hosting provider |
|---|---|---|---|
| Software and patches | Publishes releases, security fixes and their notes | Plans and applies upgrades | — |
| Physical infrastructure | — | Your datacenter, if you host it yourself | Datacenters and hardware; depending on the offer, SecNumCloud qualification or HDS certification |
| Cluster and network | Runs without cluster administration rights; closes the network of workloads and sandboxes by default | Operates the cluster, quotas and network | Provides and maintains the Kubernetes offer, where applicable |
| Identities and permissions | Provides SSO, per-project roles and service accounts | Manages the directory, roles and authorized agents | — |
| AI agents | Runs every run in a disposable sandbox, calls the tools in the agent’s place, applies the guarantees, budgets and approvals | Chooses the agents, models and tools opened to each project, and names the people who approve | — |
| Data | Does not access it, except for interventions you authorize | Owns it, classifies it and decides how it is used | Hosts it physically |
| Audit | Logs every action, human or agent | Retains and uses the logs | — |
| Vulnerabilities | Handles reports and publishes fixes | Applies fixes and reports your incidents | As per its contract |
Guarantees
The design guarantees
Common to graal Data Platform and graal Agentic Platform.
Isolation and privileges
Restricted pods (PSA restricted), no rights on the cluster, no custom resources, one network policy per workload.
See securityIdentity
OIDC and SAML SSO, LDAP or Active Directory, permissions per project and per resource, the same SSO for both platforms.
Secrets
Encrypted at rest (AES-GCM), referenced by name, never displayed or written into code.
Nothing leaves
No telemetry, no third-party service: no SaaS, no external fonts, no external captcha.
See sovereigntySoftware supply chain
Images pinned by digest and signed, software bill of materials (SBOM) shipped with every release. Open source code, under the Apache 2.0 license.
Audit
The same trail for people and for agents: who did what, on which resource, with what result.
Agentic Platform
What stops an agent
No instruction given to the model protects anything: it is mechanisms that hold an agent back.
A disposable sandbox per run
Every run executes in its own sandbox: an unprivileged pod, a workspace, a short-lived token. The sandbox disappears with the run.
See the mechanismsA network closed by default
No outbound traffic, except through one relay per project whose list of domains is the one in the project policy.
No credential held by the agent
Tool keys stay in the platform, which calls the tool in the agent’s place. The pod only receives tokens issued for its run.
Approval by someone else
A write to a third-party system waits for the decision of an authorized person, other than the one who proposes it, recently re-authenticated.
See the guaranteesNo decision through MCP
Neither an API token nor an MCP client decides: a decision requires a human session.
A capped model key per run
Every run gets its own key, with a spending cap. At the cap, the next call is refused.
See the budgetsQualified hosting
The label belongs to the hosting provider
SecNumCloud qualifies cloud offers, and HDS certification applies to health data hosting providers. graal Data Platform and graal Agentic Platform deploy with a SecNumCloud-qualified or HDS-certified hosting provider, just as they do in your own datacenter.
The provider then holds the label for its offer; graal brings two platforms that install without privileges and send nothing to the vendor.
Go further
The details, topic by topic
Compliance
NIS2, DORA, Data Act, AI Act, SREN: what graal helps you trace and document.
See complianceDocuments
Documents on request
Architecture pack, detailed responsibility matrix, answers to your security questionnaires: we send them to you directly, with no third-party portal and no account to create.
Get the security pack
Architecture pack, detailed responsibility matrix and answers to your questionnaires: on request, directly, with no third-party portal.