Same engine. Same evidence. Wired into the workflow you already run, at the posture your compliance function will accept. Hosted, private cloud, or on-prem.
Calls over TLS. Fastest to first score. Region choice at contract time.
The engine runs in your account. Traffic never leaves your VPC. Same models, same evidence.
Air-gap-friendly. No outbound calls at serving time. Model bundle updates on your cadence.
A model’s say-so is not evidence. A domain list is not evidence. A calibrated per-document score with the flagged passage and a plain reason is evidence a compliance function can bring into an audit and a court can cross-examine.
The default. Fastest to first score, no infrastructure work on your side, region choice at contract time.
The engine runs inside your cloud account. Traffic does not leave your network perimeter. Managed release cadence.
The engine bundle installs on your metal. Air-gap-friendly. Updates delivered as signed artifacts on the cadence you choose.
Customer inputs are not used to train or tune models. Where segregation matters more than convenience, the private VPC and on-prem shapes remove the question entirely.
Set at contract, not at defaults. Logs held for the operational minimum, and the operational minimum is negotiated, not assumed.
Every score carries the engine version. Version bumps are gated and released on a schedule you can plan against, not pushed silently.
Score, evidence, version, and timestamp travel together. What was scored, when, and against which engine, all reproducible on demand.
Role-based access on the admin surface. SSO on the enterprise plan through your existing IdP.
Written into every contract. Verifiable on the hosted shape. Immediate on the private shapes because the data never left your perimeter.
Thirty minutes. The workflow you want verified. Where the check would sit. What compliance is asking for.
Your engineers and ours. Deployment shape, integration surface, data path, version discipline, ops runbook.
MSA and order form. Retention, deletion, and audit terms written explicit. Sign path, not a sales cycle.
Deploy on the agreed shape. First real traffic. Named engineering contact on standby.
Yes. The engine runs inside your account, traffic does not leave your perimeter, release cadence is scheduled against your change window.
On the enterprise plan, yes. SAML and OIDC through your existing identity provider. Role-based access on the admin surface.
Terms are negotiated per client and set in the technical call, not the intro.
Yes. Every score reproduces against the recorded release. That reproducibility is the property regulators and courts require in an evidentiary signal.
Rarely. Lens usually sits alongside them. Domain reputation, brand safety, and content moderation answer different questions. Document-level quality is what this layer answers.
The Lens applied research and legal teams jointly, on every enterprise contract.
Fill this in and it goes straight to the Lens inbox. Next step is a thirty-minute intro call.
Two other lanes are open. Get early access to Lens for AI, or send a campaign log and get a scored audit back.