Book a meeting

Loading the calendar…

Propul AI
Book my assessment

Security

Where your data goes, and who can see it.

This page says what is in place today, what is planned for the launch of the Kap Box, and what has not been decided yet. Every line carries its status.

The path

The path of a request.

Kap prepares, you approve, and the result is placed as a draft in your tool.

External AI providerNothing is sent: this path does not exist
  1. 1Your computer
  2. The device, in your offices
    1. 2Kap
    2. 3Proposed reply
    3. 4You approve
  3. 5Draft in your tool
Your connected toolsThe only path that goes out: to the services you already use
With the Kap Box, the model, the database and the documents are on the device, in your offices. The only path that goes out leads to the tools you have connected.

The flows

What travels, and in which direction.

PathDataStatus
Your computer to KapYour requests and the answersIn place
Kap to an external AI providerNothing: there is no fallbackIn place
Kap to your connected toolsThe email, calendar and documents you chose to connectIn place
Kap to a search engineThe question only, never your documents. Optional featurePlanned for launch
Our team to the deviceUpdates and maintenance, over an encrypted connection the device opens itselfPlanned for launch
Audience tracking from the applicationNoneIn place

What Kap keeps from your emails. For each email reviewed: the sender, the subject, the date, an excerpt, a summary and the draft reply. Access to your tools is encrypted.

Permissions

Who sees what.

  • Four roles

    Administrator, manager, member, reader. Each sees only what their role allows.

    In place

  • Data kept apart

    One organisation’s data is separated from the others’, in the database itself.

    In place

  • Two-factor authentication

    A code is added to the password. Nobody can create an account without being invited.

    In place

Approval

Nothing goes out without you.

  • A draft, not a sent message

    A reply prepared by Kap is only placed in your mailbox as a draft, after your approval.

    In place

  • Who approved, and when

    Every approval is recorded with the person’s name and the time.

    In place

  • A log that cannot be rewritten

    Every action is added to it, whether it comes from a person or from Kap. Nothing in it is changed afterwards.

    In place

The risks

Seven risks, seven protections.

The Kap Box has not shipped yet: the device protections are those we are putting in place for its launch.

  1. 01

    The network

    The risk
    Someone scanning the internet finds the device.
    The protection
    No port is open to the outside. The device only opens outgoing connections, and a firewall blocks everything else.
    Planned for launch
  2. 02

    Maintenance access

    The risk
    Our maintenance access becomes a way in.
    The protection
    Two-factor authentication, a different key for each device, access limited to two named people and a log of every connection.
    Planned for launch
  3. 03

    Remote hardware management

    The risk
    If badly configured, the feature that powers on and controls the machine remotely becomes a weakness.
    The protection
    Factory credentials changed. The feature can only be reached through our private maintenance network, never from the internet.
    Planned for launch
  4. 04

    Theft of the device

    The risk
    Someone takes the device and reads the disk.
    The protection
    Fully encrypted disk, a start-up password and secure boot.
    Planned for launch
  5. 05

    A booby-trapped email

    The risk
    An email or a document contains hidden instructions, for example “send this file to this address”.
    The protection
    Kap takes no action without human approval, and each user only sees the documents they are entitled to.
    In place
  6. 06

    Accounts

    The risk
    An account stays open after an employee leaves.
    The protection
    Two-factor authentication is in place. Sign-in with the company account and immediate removal of access when an employee leaves are planned.
    Planned for launch
  7. 07

    Hardware and updates

    The risk
    An unneeded feature or out-of-date software opens a gap.
    The protection
    No Wi-Fi and no Bluetooth, automatic security updates, no unneeded software installed.
    Planned for launch

The hardware

Where the device comes from, and what it does with the internet.

Where the hardware comes from

The hardware is made in Asia, like almost every computer. All the software is installed and checked by us, in Europe.

The device sends your documents to no AI provider. Its only outgoing connections are those in the table of data flows.

Kap and the internet

Kap is designed so that the AI runs on the device, without going through an online service to answer. We will confirm this on a delivered device.

Online search is an optional feature. When it is switched on, only the question goes to the search engine. Your documents stay on the device, and the answer cites its sources.

In all honesty

What is not finished yet.

We would rather write it down than leave you guessing. This list will be kept up to date.

  • Retention periods and deletion

    How long each piece of data is kept, and what is deleted when you disconnect a tool: not settled yet.

    Being defined

  • What our team can see on your side

    The cases in which our team accesses your installation, and what it can read there: being written.

    Being defined

  • Working without the internet

    Planned: Kap answers and finds your documents with no connection. Connected tools do need the internet. We will publish this once it has been proven on a delivered device.

    Planned for launch

  • Backups

    Planned: an encrypted backup every day, with a copy on your premises.

    Planned for launch

Page updated on 13 November 2026.

A question about security?

Write to us: we will reply.

See our commitmentsWrite to us