KARST_FATHOM // EARLY ACCESS

Harness AI to the fullest, even on sensitive data.

Karst_Fathom runs on each computer, between your team's AI tools and the model providers. It ensures that any sensitive data is encrypted before information leaves the device, providing verifiable proof that your data did not leak and the LLMs never got access to what you protected.

Maximize the value of your AI investment without sacrificing your peace of mind.

Schedule a demo

WHAT IT DOES

Security alongside the AI you use, without changing how your team works.

Karst_Fathom is the missing piece to maximizing enterprise AI value. Nothing leaves the device unprotected, and nothing comes back unverified.

01

Encrypt before it leaves the device

On-device redaction finds sensitive values in the prompt window and encrypts each one to your organization's key before the request is sent. What reaches an AI provider is ciphertext that carries no key - the LLMs can't see data you encrypt.

02

Prove every exchange

Each request is signed with a key held in the device's secure hardware, the Secure Enclave on Mac or the TPM on Windows, and recorded as a receipt the control plane verifies. Receipts carry fingerprints of the content, never the content itself.

The first certifiable audit chain for AI: dual provenance.

03

Agile policy across devices

Set providers, redaction, and classification once. Every device picks up changes automatically and keeps enforcing the last policy while offline. Keys are wrapped with X-Wing, combining ML-KEM-768 (FIPS 203) with X25519, so recording traffic today does not expose it tomorrow.

BEFORE YOU SIGN UP

What early access means

Do I need an access code?

Early access is invite only for now. If someone on our team or a partner gave you a code, enter it and your access is approved automatically. No code? Sign up anyway and you join the waitlist. You will hear from us the day Karst_Fathom opens to everyone.

What happens after I am approved?

We create your Karst_Fathom account under the email address you signed up with and send you sign-in instructions and a quick start guide. Each person installs the app and signs in once in the browser; Karst_Fathom enrolls the computer and sets up the AI applications your policy covers.

Which AI tools and platforms does it cover?

Karst_Fathom runs on macOS and Windows, with Linux coming soon. On-device protection covers prompts to Claude Desktop, Claude Code, and Codex, with your own AI provider keys configured in policy. Karst_Fathom will be compatible with additional AI providers prior to full product release.

Who manages the encryption keys?

Keys are managed by Qanapi today; customer-managed keys are on the roadmap. Request signatures use ECDSA P-256 in each device's secure hardware, and post-quantum signatures are planned. Keys and tokens are versioned, so you can rotate and move to new algorithms without re-encrypting anything already sent.

Be first to protect your team's AI

Enter your access code, or join the waitlist and hear from us on launch day.

Get early access