Features

One workspace for sensitive work.

Phase I is Console, Analyst, and Scouts. Phase II adds Operator and Auditor. Bolde Custom and Rollbax come later.

Bolde. Console

The main workspace

What it does

  • Gives your team one place to ask questions and review sourced answers.
  • Requires human approval before work leaves your boundary.
  • Brings Analyst, Scouts, Operator, and Auditor into one workflow.
  • Keeps the human responsible for the decision.

What it doesn't do

  • Does not make decisions for you.
  • Does not send data or queries outside your network.
  • Does not act across a boundary without approval.
  • Is not a chatbot bolted onto your files.

Where it lives

On dedicated compute and storage inside your network. Inference, retrieval, and display stay in your VPC or on-prem footprint.

What it cites

Every answer and chart links to the source material behind it.

What gets logged

Every session, approval, and boundary-crossing action records the user, time, action, confirmation, and output hash.

Phase I — first

Bolde. Analyst

Sourced analysis on your data

What it does

  • Answers business questions from your data and cites the sources.
  • Shows confidence, source links, and the next question worth asking.
  • Runs on a schedule or when you ask.
  • Explains changes with links back to the records behind them.

What it doesn't do

  • Does not make decisions for you.
  • Does not send queries or results to external model APIs.
  • Does not read data sources you did not configure.
  • Does not create numbers without a source record.

Where it lives

Inside your network, connected to Console. Inference, retrieval, and storage stay in your VPC or on-prem footprint.

What it cites

Every figure traces to the source table, query, and row range that produced it.

What gets logged

Each run records the user, time, data range, output hash, and citations used.

Phase I — first

Bolde. Scouts

Short briefs on what changed

What it does

  • Watch configured data sources for what changed and what needs attention.
  • Produce a short brief at 7 a.m. or after major data movement.
  • Rank what moved, by how much, and why it may matter.
  • Flag anomalies against thresholds you set.

What it doesn't do

  • Do not pull from public web sources unless you configure them.
  • Do not trigger actions automatically.
  • Do not keep raw intermediate signals beyond the analysis window.
  • Do not send briefs to personal email or consumer platforms.

Where it lives

Inside your network, on your schedule. Job metadata and outputs stay in your boundary.

What it cites

Each brief item names the data source, metric, time window, and baseline.

What gets logged

Each run logs start time, sources checked, signals reviewed, anomalies found, and delivery confirmation.

Phase I follow-on — Q4 2026

Bolde. Operator

Repeatable work inside your rules

What it does

  • Runs repeatable work: retrieval, synthesis, document prep, and analysis pipelines.
  • Logs every action to Auditor.
  • Stops for approval at policy boundaries.
  • Keeps repeatable work inside the approved process.

What it doesn't do

  • Does not act without policy and logging.
  • Does not send data outside your network at runtime.
  • Does not make regulated decisions for people.
  • Does not hide behind the word "agent." It names the work it performs.

Where it lives

Inside your VPC or on-prem footprint. State and outputs stay on your infrastructure.

What it cites

Every action links to the source data, output, and action taken.

What gets logged

Every action records the user, time, workload, inputs, outputs, and action taken.

Phase II — next

Bolde. Auditor

A record of every important action

What it does

  • Keeps a tamper-evident record of queries, answers, citations, approvals, and Operator actions.
  • Makes answers replayable and exportable.
  • Flags policy issues early.
  • Produces audit packages with query logs, citations, access history, and output hashes.

What it doesn't do

  • Does not send audit packages to external services.
  • Does not alter log entries after they are written.
  • Does not delete records without explicit approval.
  • Does not decide compliance. It provides evidence for your team.

Where it lives

On infrastructure you control, with no replication to Bolde systems.

What it cites

Every log entry references the product, data source, and output hash.

What gets logged

Auditor also logs who requested an audit package, what it included, and the export hash.

Phase II — next

Bolde. Custom

Coming soon: your tuned Bolde model

What it does

  • Starts from Bolde-Small, our proprietary base model.
  • Learns from approved workflows, review signals, and feedback you choose to provide.
  • Turns Bolde into a model shaped by your work without sending that work to public model vendors.

What it doesn't do

  • Not part of the MVP or Phase II pilot.
  • Does not train on your data by default.
  • Does not share customer-specific behavior across customers.

Where it lives

Planned for the same controlled deployment boundary as the rest of Bolde.

What it cites

Planned to preserve source citations and review signals as the model improves.

What gets logged

Planned to record which approved feedback changed behavior, when, and by whom.

Coming soon — Phase III+

Bolde. Rollbax

Later: reversal for approved Operator work

What it does

  • Planned for a later phase.
  • Designed to reverse approved Operator actions while keeping the audit trail.

What it doesn't do

  • Not part of the MVP or Phase II pilot.
  • Not a backup tool or disaster recovery system.

Where it lives

Planned for infrastructure you control, paired with Operator and Auditor.

What it cites

Planned to link each reversal to the original action and the outcome.

What gets logged

Planned to record who reversed what, when, and why.

Coming soon — Phase III+
Phase I Console, Analyst, Scouts
Phase II Operator, Auditor
Model Bolde-Small base
Later Custom, Rollbax

Ready to see it on real work?

Bring a sensitive use case. We will show how Bolde keeps the data inside and the answer sourced.