01
Pinned rules
Verdicts come from a versioned, pinned ruleset, not from a model. The same input under the same ruleset gives the same result.
Trust · security · data residency · decision evidence
Evidence you can produce on demand.
Our products are designed to run inside your perimeter, under your policies, with no external AI service in the path. They are designed so that every decision can be explained, and its record checked for tampering.
How decisions stay defensible
Four controls behind every verdict.
Shown here as implemented in Saolix Eagle. SaoHub applies the same boundary to agents: they propose, your rules and approvers decide, and every action is kept in a sealed record.
02
Sealed audit
Every interactive screening is sealed in a tamper-evident audit log, written together with the decision, so the record cannot be quietly altered without detection.
03
Integrity on demand
An integrity check verifies the audit log on demand and shows whether it is intact, and exactly where, if anything changed.
04
Bounded AI
AI output is logged as advisory. It can label and explain but never close a case, and a real hit is always returned for human review.
Deployment and data residency
Your data never leaves.
Eagle and SaoHub are installed and run on infrastructure you control. Screening data, identity data, case records, documents and audit logs stay inside your perimeter and your jurisdiction. The language models the products use run locally on your hardware; no external AI service is needed, and none is called unless you switch one on, with a person's approval and a spend cap.
On-premise
Inside your own data centre, on hardware you control.
Private cloud
In your own cloud account and region, under your own access controls.
Air-gapped
With no outbound connection at all. Lists, rulesets and models are brought in through your change process.
Sub-processors
None, for product data
Because the products run on your infrastructure, Saolix does not hold or process your customers' data, and no third party processes it on our behalf. The only personal data Saolix itself handles is what you send through this website; see the privacy policy.
Access and audit
Your identity, your roles
Access is through your own single sign-on and role model. Every screening, verdict, agent action and document carries a sealed audit record that can be verified on demand for an examiner, with the ruleset and list versions it ran under.
Security posture
Said plainly.
Framework
ISO 27001 as the reference
We use ISO 27001 as our reference framework for security practices. Saolix holds no security certification at present: not ISO 27001, not SOC 2. We would rather say so than imply otherwise. Our deployment model is the control that matters most: the product, and your data, sit inside your perimeter, under your own security programme.
Regulated institutions in Kenya
Built for your examiner's questions
Banks and payment service providers in Kenya operate under Central Bank of Kenya guidance on outsourcing, ICT risk and the use of cloud services. An on-premise or private-cloud deployment keeps processing and data inside the institution and its jurisdiction, which is designed to make those conversations simpler: there is no outsourced processing of customer data to describe. This is a description of how the product is built, not regulatory advice; confirm your own obligations with your compliance function.
On request
What you can ask us to show you.
We would rather demonstrate than describe. Any of these can be arranged in a working session.
Architecture
A walkthrough
How the product is built and where the determinism boundary sits.
Audit
A live integrity check
We run the audit integrity check in front of you and show what a verified log looks like.
Deployment
Your topology
How the product would sit in your environment, on your own infrastructure.
Accessibility statement
This website
We want saolix.com to be usable by everyone. The site is built to the Web Content Accessibility Guidelines (WCAG) 2.1 at level AA as its target: every page has a skip link, a single main landmark and headings in order; every control can be reached and used with the keyboard, with a visible focus ring; text is never set below 12 pixels and colour contrast is checked against the guideline; images that carry meaning have text alternatives and diagrams carry a spoken description; the site respects your reduced-motion setting; and the site works without cookies or JavaScript, apart from the enquiry form's live sending, which falls back to your email application.
We check these with automated tests on every build and by hand on each release. If anything on this site is hard for you to use, email info@saolix.com and we will fix it or give you the content another way.
Ask us to show you.
A walkthrough, a live integrity check, or your own topology: tell us which, and when.