Clear authority
Approved rules run automatically. Agent proposals wait for review. Rule changes, external messages, and overrides need expert approval.
Trust
Built for regulated operations
The controls are part of the record: who may approve, what ran, and which file a figure came from.
Full lineage
Trace any figure through each transformation to the file it came from, and to the approval that let it through.
Deterministic at runtime
Approved processes run without a model in the loop. They keep running when AI is not in use.
Your environment
Any model you approve, your cloud or ours, an isolated cluster per client. Credentials stay in your vault.
AI governance
The model proposes. The rule, and a person, decide.
Your data is not used to train foundation models. You choose which models and gateways are available. A signed workflow does not need a model call to produce the same result tomorrow.
Your data
It stays in the environment you run
- Encrypted in transit and at rest, with retention set per workspace.
- Data, secrets, and run history stay in the client's own environment.
- You choose the models. Keys stay in your vault.
Audit records
A past run can be opened again
- Sign-ins, role changes, and access to secrets are written to an append-only ledger.
- Workflow lineage records how every business value was calculated.
- Any past run can be inspected and its calculations rerun. External actions are not repeated.
Where it runs
Your cloud or ours, with one isolated cluster per client
A shared multi-tenant cloud can stall legal review, residency commitments, and internal security policy. Fontana runs where your reviewers will sign off: in your cloud or ours, or on your own infrastructure. Identity is SSO, MFA, and SCIM in every workspace. Agent code runs in short-lived sandboxes. Changing a permission is a policy change: approved, versioned, and recorded.
Assurance
SOC 2 Type 1 report
Sensiba and Tempo examined Fontana. The SOC 2 Type 1 report, issued in 2026, is available to customers and prospects under NDA. Control narratives, our DPA, and the subprocessor list are available the same way.
Request the reportRead the control summary