Skip to content
Koralis AIBook a free Scoping Review

For IT, DPO and general counsel · status as at 6 November 2026

Someone asked you to look at us. Here is everything you would ask.

What we hold, what we don't, and when that changes. Every “not yet” below carries a month, or says plainly that it has none.

Our answers to the six questions ↓Open the one-page brief ↓

Asked to approve AI for one team? What Kovac lets you check, for Risk and audit and IT, security and AI leads.

The status board · the six questions

The six questions we'd tell you to ask any vendor. Our answers, including the ‘not yets’.

Each answer says what is true today and gives a month for the gap, or says there isn't one yet. We would rather you read the gaps here than find them in procurement. If a month moves, this page changes the same week.

Not in place today: Cyber Essentials (due by the end of November 2026), Cyber Essentials Plus, a penetration test, SAML and SCIM, SOC 2, ISO 27001, professional indemnity insurance and a data processing agreement. A pilot on personal data waits for the data processing agreement.

  1. 01

    When the policy service is unavailable, does a data request fail or proceed?

    Not yet

    Not on every route yet. On the routes Kovac checks, the policy check sits on the route to data rather than beside it. Four of the seven routes to data are not checked yet (the denial answer below names them), so a request on those reaches data without a policy decision. And three failure cases still let a request through when they should stop it: a deploy whose policy call fails, a read of a record whose clearance lookup errors, and a plan that cannot be signed, which runs unsigned rather than halting. The guide's questions 1 and 3 are how to test it.

    When: Every route blocks a request when the policy check cannot run, by the end of November 2026.

  2. 02

    Which connectors are in production with a paying customer today, and which appear only in the demo?

    Not yet

    None: Kovac is not yet in production anywhere. What connects today: PostgreSQL and MySQL, for connection tests and schema discovery. SharePoint and OneDrive, with Microsoft Entra ID sign-in, are in alpha testing. Google Drive and shared drives, Gmail, and Docs and Sheets content, with Google sign-in, by November 2026. Kovac cannot yet read straight from your database tables. Microsoft Dynamics and HiBob are in development and are not shipping. Xero and Sage appear in our demo materials and are not shipping yet, and we will not scope work that depends on them until they ship.

    When: SharePoint and OneDrive, with Microsoft Entra ID sign-in, are in alpha testing. Google Drive and shared drives, Gmail, and Docs and Sheets content, with Google sign-in, by November 2026. Xero and Sage by November 2026. Reading straight from your database tables, Microsoft Dynamics and HiBob by December 2026.

  3. 03

    Show me a denial.

    3 of 7 routes to data checked

    Yes, on the routes Kovac checks. An object, action or deploy request that policy refuses is denied, and the refusal is recorded. File reads, previews, code run directly (/execute) and connection reads are not checked today, so on those paths there is no denial to show. Ask to see the denial on the route you care about.

    When: All seven routes to data checked against your policy by the end of November 2026.

  4. 04

    Who can read the audit log, and can they alter it?

    Not yet

    The record is searchable, but any signed-in user can add an entry in anyone's name, and entries are not signed or linked together when written. By question 4's own test – an audit trail that can be quietly edited is a log – ours is a log today.

    When: By the end of November 2026, only Kovac itself can write to the record; by then, every entry is signed and linked to the one before it as it is written, permitted requests as well as refusals.

  5. 05

    What certifications do you hold today, and which are in progress?

    Not yet

    None today: Cyber Essentials is due by the end of November 2026, and SOC 2 Type II is not held. If your procurement requires either today, we do not clear that bar yet.

    When: Cyber Essentials by the end of November 2026. SOC 2 Type II: not started. We will publish a date when an auditor is engaged.

  6. 06

    Where does my data physically sit, and what would have to change for it to sit somewhere else?

    Not yet

    Kovac is packaged to run on AWS, Azure or Google Cloud and is not yet running in production. Pilots run locally, on the client's own machines. There is no multi-tenant model. Jurisdiction-specific hosting, and customer-hosted or air-gapped deployment for production, are not shipped. We will tell you which applies to you before scoping rather than during implementation.

    When: First pilot deployment, in beta, by the end of November 2026; UK and EU hosting, and customer-hosted and air-gapped options, by December 2026.

  7. +1

    Can you give me a reference customer?

    Not yet

    Not a named one. We work with a design partner whose name we have not been cleared to use. Ask us again as that changes.

    When: When our design partner clears us to name them – their decision, not a build.

  8. +2

    Does Kovac make us GDPR-compliant?

    No

    No, and it will not become so. We build with GDPR-aware handling in mind; that is a design discipline, not a claim of legal compliance. Any vendor telling you their product makes you compliant is describing something a product cannot do on its own.

    When: Not planned, by design.

The six questions come from our buyer's guide, which is vendor-neutral: use it on anyone else you're talking to as well.

Put them to both foundersRead the buyer's guide

What Kovac does and doesn't touch

On Microsoft 365?

Kovac doesn't govern Copilot. SharePoint and OneDrive are in alpha testing, with no date yet; until they connect, one export can go into a pilot, as files.

If Copilot is already your AI tool and its permissions are sound, know this first: Kovac does not change what Copilot can see.

What Kovac governs
Requests to data loaded into itFrom people and pipelines built on it, checked against your policy before they reach the data: on three of seven routes to data today, all seven by the end of November 2026. Fields you mark sensitive are masked with placeholders before Kovac passes them to an AI model or posts them to another system.
What it does not
Microsoft Copilot and web chat assistantsKovac does not sit in front of them. Tools that bypass Kovac, it does not see.
Not shipping yet
SharePoint and OneDriveSharePoint and OneDrive, with Microsoft Entra ID sign-in, are in alpha testing. Until they are released, data held there can go into a pilot as an export, supplied as files, with the fields to mark agreed at the Scoping Review.

On Google Workspace?

Kovac doesn't govern Gemini. Google Drive, Gmail, Docs and Sheets connect by November 2026; until then, one export can go into a pilot, as files.

If Gemini is already your AI tool and its permissions are sound, know this first: Kovac does not change what Gemini can see.

What Kovac governs
Requests to data loaded into itFrom people and pipelines built on it, checked against your policy before they reach the data: on three of seven routes to data today, all seven by the end of November 2026. Fields you mark sensitive are masked with placeholders before Kovac passes them to an AI model or posts them to another system.
What it does not
Gemini for Google Workspace and web chat assistantsKovac does not sit in front of them. Tools that bypass Kovac, it does not see.
Not shipping yet
Google Drive, Gmail, Docs and SheetsGoogle Drive and shared drives, Gmail, and Docs and Sheets content, with Google sign-in, by November 2026. Until then, data held there can go into a pilot as an export, supplied as files, with the fields to mark agreed at the Scoping Review.

Bring your Microsoft 365 or Google Workspace questions to a free Scoping Review →

What Kovac is

What it does today, in beta.

No adjectives. This is what it does today, and the main things it doesn't do yet.

  • Checks policy before the dataA request is checked against your policy before it reaches the data, on three of seven routes to data today. Month: see answer 3.
  • Records refusalsRefusals on the routes Kovac checks are kept in a searchable record. Month: see answer 4.
  • Masks what you mark sensitive with placeholdersFields you mark sensitive are masked with placeholders before Kovac passes them to an AI model or posts them to another system. The same value always gets the same placeholder, so masked data can still be linked to a person and remains personal data. From late November 2026, in pilots, AI models connect through Kovac's check.
  • Enforces column markingsOn record reads in Kovac today; not yet on raw files or previews. Clearances enforced on every read by the end of November 2026, and carried through pipeline transformations, computed server-side, by March 2027.
  • Ed25519 signingThe kernel holds the signing key, so only the kernel can produce a valid signature. Nothing verifies one yet. The signature covers a plan's id, intent and code hash – not its inputs and outputs – and a deploy is signed after it runs. If the kernel is unreachable the operation proceeds unsigned. Nothing runs unsigned by the end of November 2026. Every plan signed before it runs, covering its inputs, outputs and permitted operations, and verified by the engine that runs it, by March 2027.
  • Access controlPolicy-as-code and a permission graph; time-boxed grants, with expiry enforced. A grant is scoped per marking rather than per dataset, and by the end of November 2026 only your administrator or your Data Officer can issue or revoke one. Sign-in is by OpenID Connect (OIDC) only today. No SAML single sign-on or SCIM provisioning. No date yet.
  • Works on data supplied as filesPostgreSQL and MySQL connect, for schema discovery. Month: see answer 2.
  • Not yet: every route blocking a request when the check failsFour of seven routes to data are not checked yet, and three failure cases still let a request through when they should stop it. Month: see answer 1.
  • Not yet: an audit trail signed as it is writtenAny signed-in user can add an entry today, so by our own guide's test the trail is a log. Month: see answer 4.
  • Not yet: a production deploymentKovac is packaged to run on AWS, Azure or Google Cloud, and has not yet run as a production deployment. It has no multi-tenant model yet. No production date. A first pilot deployment, in beta, and hosting options: see answer 6.

How Kovac works, step by step →

An illustration of what the record holds. Sample data, not a screenshot of the product.

Will we clear your bar?

Tick what you need before a pilot.

Tick what your IT and legal leads will require. We'll say which have a month and which don't. The result is written so you can forward it as it stands.

Every requirement we are asked about, and where we stand on each, as at 6 November 2026.

  • Cyber EssentialsDatedCyber Essentials: not held yet – due by the end of November 2026.
  • Cyber Essentials PlusNo date yetCyber Essentials Plus: not held. No date yet.
  • A SOC 2 Type II reportNo date yetSOC 2 Type II: not started. We will publish a date when an auditor is engaged.
  • ISO 27001 certificationNo date yetISO 27001: not held. No date yet.
  • A penetration test reportNo date yetPenetration test: none yet. No date yet.
  • Professional indemnity insuranceNo date yetProfessional indemnity insurance: not held today. No date yet.
  • A data processing agreement before we share dataNo date yetData processing agreement: being put in place, no date yet. A pilot on personal data waits for it.
  • SAML sign-on or SCIM provisioningNo date yetSign-in is by OpenID Connect (OIDC) only today. No SAML single sign-on or SCIM provisioning. No date yet.
  • It connects to SharePoint or OneDriveNo date yetSharePoint and OneDrive, with Microsoft Entra ID sign-in, are in alpha testing. No date yet.
  • A Google Workspace connector (Drive, Gmail, Docs, Sheets)DatedGoogle Drive and shared drives, Gmail, and Docs and Sheets content, with Google sign-in, by November 2026.
  • UK or EU hostingDatedFirst pilot deployment, in beta, by the end of November 2026; UK and EU hosting, and customer-hosted and air-gapped options, by December 2026.

Held · Not held · When

The trust table.

“In progress” is a legitimate answer. “Aligned” or “ready” is a way of not answering, so neither appears as a status here.

Status as at 6 November 2026. Months are our dated commitments.

Key:Teal in place todayGrey partly, or being put in placeWhite not held, or not yet

Certification and testing
Cyber EssentialsStatus:Not held – due November 2026Not held until the certificate is issued.When:By the end of November 2026.
Cyber Essentials PlusStatus:Not heldWhen:No date yet.
SOC 2 Type IIStatus:Not startedIf your procurement requires it today, we do not clear that bar yet.When:SOC 2 Type II: not started. We will publish a date when an auditor is engaged.
ISO 27001Status:Not heldWhen:No date yet.
Penetration testStatus:Not doneWhen:No date yet.
Identity
Sign-inStatus:OIDC onlyWhen:Sign-in is by OpenID Connect (OIDC) only today. No SAML single sign-on or SCIM provisioning. No date yet.
Contract and cover
Contracting entityStatus:Koralis AI LimitedYour contract is with Koralis AI Limited.When:Koralis AI Limited · Registered in England and Wales, company number 16558134.
Data processing agreementStatus:Being put in placeA pilot on personal data waits for it, so a late-November start on personal data depends on it.When:No date yet.
Professional indemnity insuranceStatus:Not held todayWhen:No date yet.
Evidence and law
Reference customerStatus:None yetWhen:When our design partner clears us to name them – their decision, not a build.
Makes your organisation GDPR-compliantStatus:No – no product can make you compliant.GDPR-aware governance; not legal compliance advice.When:Not a product property, by design. Kovac supports your controls; it does not make you compliant.

Where the controls actually are

Every control, today and by when.

The same dated commitments as the answers above, grouped the way a security review asks about them.

What Kovac governsToday:Data loaded into itRequests from people and pipelines built on it. It does not sit in front of Microsoft Copilot, Gemini for Google Workspace or web chat assistants.By when:On Microsoft 365? ↑
Routes to data checked against policyToday:3 of 7By when:As answer 3 above.
Failure behaviourToday:3 failure cases let a request throughBy when:As answer 1 above.
Audit trailToday:A log todayRecorded and searchable. Not signed. Any signed-in user can add an entry.By when:As answer 4 above.
Refusal recordToday:Refusals onlyRefusals on the routes Kovac checks are recorded. Permitted requests are not recorded yet.By when:As answer 4 above.
SigningToday:PartlyEd25519, with the key held by the kernel, when the kernel is reachable: plans, actions and grants; a deploy is signed after it runs. A plan's signature covers its id, intent and code hash. If the kernel is unreachable the operation proceeds unsigned.By when:Nothing runs unsigned by the end of November 2026.Every plan signed before it runs, covering its inputs, outputs and permitted operations, and verified by the engine that runs it, by March 2027.
Column clearanceToday:Object reads onlyEnforced on record reads in Kovac; not on raw files or previews.By when:Clearances enforced on every read by the end of November 2026, and carried through pipeline transformations, computed server-side, by March 2027.
Sensitive fieldsToday:MaskedFields you mark sensitive are masked with placeholders before Kovac passes them to an AI model or posts them to another system. Masking works on the fields you mark: the columns of a spreadsheet or record set. It does not reach into the text of a Word or PDF document.By when:In place today.
ConnectorsToday:2 of 6 connect (PostgreSQL, MySQL)None in production. PostgreSQL and MySQL connect, for schema discovery. SharePoint and OneDrive, with Microsoft Entra ID sign-in, are in alpha testing. Google Drive and shared drives, Gmail, and Docs and Sheets content, with Google sign-in, by November 2026.By when:As answer 2 above.
HostingToday:Not yetPackaged to run on AWS, Azure or Google Cloud; not yet run as a production deployment, and no multi-tenant model yet. In a pilot: Kovac runs on your own machines; a hosted AI model, if you choose one, is outside them.By when:As answer 6 above.

If you're the one championing this

Your IT and legal lead will ask the same six questions. Send them the answers first.

One page for whoever signs it off: certifications, where data sits, the audit trail, insurance, the contracting entity and the data processing agreement, including the parts that aren't in place yet.

Print this page from your browser, or forward koralis.ai/security#brief.

Koralis AI: a brief for your IT and legal lead

One page. Status as at 6 November 2026. Every gap is listed with its month, or with “no date yet”.

Kovac · beta

What it is

Kovac checks requests to an organisation's data, from people and pipelines built on it, against policy before they reach the data: on three of seven routes to data today. It keeps refusals in a searchable record – a log today, since any signed-in user can add an entry – and fields marked sensitive are masked with placeholders before Kovac passes them to an AI model or posts them to another system. It does not sit in front of Microsoft Copilot, Gemini for Google Workspace or web chat assistants.

Stage

Beta. Kovac is not yet in production anywhere. Our first early-access pilot, unpaid, is running; paid pilots start from late November 2026. From late November 2026, in pilots, AI models connect through Kovac's check. Paid pilots on client data from late November 2026, four weeks from data access; a pilot on personal data also waits for the data processing agreement (below). Until December 2026 we run one pilot at a time. A paid pilot on your data starts on a route only once that route blocks a request when the policy check cannot run, only Kovac writes the record, and only an administrator or a Data Officer grants clearances or changes markings. Our design partner cannot be named yet; when they can is their decision.

Where your data sits in a pilot

Kovac runs on your own machines; a hosted AI model, if you choose one, is outside them. One dataset, supplied as files, used only for the pilot. In a pilot, from late November 2026, Kovac is model-agnostic: you choose the AI model, a hosted one or your own on your own network. Fields you mark sensitive reach it masked with placeholders; fields you don't mark reach it as they are. Masking works on the fields you mark: the columns of a spreadsheet or record set. It does not reach into the text of a Word or PDF document.

Not yet in place, with the month each is due

  • All seven routes to data checked against your policy by the end of November 2026.
  • Every route blocks a request when the policy check cannot run, by the end of November 2026.
  • By the end of November 2026, only Kovac itself can write to the record; by then, every entry is signed and linked to the one before it as it is written, permitted requests as well as refusals.
  • Nothing runs unsigned by the end of November 2026.
  • Clearances enforced on every read by the end of November 2026.
  • SharePoint and OneDrive, with Microsoft Entra ID sign-in, are in alpha testing.
  • Google Drive and shared drives, Gmail, and Docs and Sheets content, with Google sign-in, by November 2026.
  • First pilot deployment, in beta, by the end of November 2026; UK and EU hosting, and customer-hosted and air-gapped options, by December 2026.

Certification and identity

  • Cyber Essentials: not held yet – due by the end of November 2026.
  • SOC 2 Type II: not started. We will publish a date when an auditor is engaged.
  • ISO 27001 and a penetration test: neither yet, no date yet.
  • Sign-in is by OpenID Connect (OIDC) only today. No SAML single sign-on or SCIM provisioning. No date yet.

Contract, insurance, DPA

Koralis AI Limited · Registered in England and Wales, company number 16558134. Your contract is with Koralis AI Limited. A pilot on personal data waits for a data processing agreement, which is being put in place and has no date yet. Professional indemnity insurance: not held today. No date yet.

Microsoft 365 and Google Workspace

Kovac does not sit in front of Microsoft Copilot or Gemini for Google Workspace. Until SharePoint and OneDrive, and Google Drive, Gmail, Docs and Sheets, are released – each month is under “Not yet in place” – data held there can go into a pilot as an export, supplied as files. No connector is in production; PostgreSQL and MySQL connect, for schema discovery.

GDPR

GDPR-aware governance; not legal compliance advice. Kovac does not make an organisation compliant, and we don't claim it does.

Questions to put to us, or to any vendor: the six in our buyer's guide, at koralis.ai/buyers-guide. To put them to a founder, book at koralis.ai/contact.

Words you won't see from us

If a Koralis page ever claims one of these for Kovac, hold us to our own guide.

  • compliant
  • enterprise-ready
  • proven at scale
  • fully governed
  • guaranteed

Our buyer's guide says a supplier who overstates a control during a sale will overstate an incident after one. That's why this page lists the gaps first. The guide's six questions work on any vendor, including us.

Read the buyer's guide

Not ready for a call? Tell us the gap that stops you.

Join the update list and name the gap in your message. This page shows each gap's month, and changes the same week a month moves.

Gaps you might name: SOC 2 · SharePoint and OneDrive · the contract and data processing agreement · insurance · all seven routes to data

Join the update list

Who you'll talk to

Your security questions, answered by the founders.

Marko, who designed Kovac's architecture, answers architecture, data handling and the gaps above against your own requirements. Every enquiry reaches both founders.

Dylan Banks

Co-Founder · Strategy & Systems

  • Board-level AI strategy across growth-stage, mid-market and enterprise businesses
  • Cross-sector: infrastructure, commercial real estate, engineering, biotech, deep tech, consultancy
Dylan on LinkedIn ↗

Marko Krznaric, PhD

Co-Founder · AI & Architecture

  • Former Palantir Forward Deployed Engineer and Technical Lead
  • Former Chief Software Architect and Technical Director, Imperial College London
  • Architect of Kovac
Marko on LinkedIn ↗

Book a free Scoping ReviewOne session, with both of us.