Security
Secured, and plain about it.
Hosted in AWS Mumbai across 3 availability zones. No model sits in the path that allows an action. We hold no security certifications today, and say so.

Trust centre
What is live, where your data sits and how decisions are made. Each point links to its full record.
The elan1 trust centre is the public record of what the company claims and how to check it: where customer data lives (AWS Mumbai, no US region), how AI agents are held to account, which capabilities are available, designed or planned, and who to contact about security or personal data.
Five commitments
Security
Hosted in AWS Mumbai across 3 availability zones. No model sits in the path that allows an action. We hold no security certifications today, and say so.
Data residency
Customer data is processed in Mumbai, with no US region. New regions open on a signed contract, never a forecast.
Responsible AI
Your rules and a person you name decide. Failures fall toward a human, never toward an action.
Claims and roadmap
Every claim is listed as available, in pilot or planned. The roadmap gives an order, not promises.
Disclosures
How we price (a refusal costs 40% of one governed action), what our demo data is, and what we used to call things.
Status at a glance
As at , none of the four platforms is generally available. Each is specified and in build, and we are inviting design partners to bring one real process.
elan1 Work
Agentic enterprise automation for ERP and CRM
elan1 Decide
Decision intelligence
elan1 Govern
Agent governance and assurance
elan1 Run
Sovereign agent infrastructure
Claims register
Each claim on this site is listed once, with what kind of claim it is, how far it has got and how you can check it. Here are six of them.
| Ref | Claim | Platform | Status | Assurance |
|---|---|---|---|---|
| WRK-03 | Any change can be undone for 30 days, and the undo is checked too. | elan1 Work | Designed | Attested |
| DEC-03 | Answers in under 800 ms, 95 times in 100. | elan1 Decide | Design target | Guarded |
| GOV-01 | Every agent action gets one of 3 outcomes: allow, ask a person, refuse. | elan1 Govern | Designed | Attested |
| GOV-07 | A refusal costs 40% of one governed action. | elan1 Govern | Available | Guarded |
| RUN-01 | 10 capability contracts, each with at least 2 open-source implementations. | elan1 Run | Designed | Attested |
| CO-01 | Customer data is hosted in AWS Mumbai across 3 availability zones, with no US region. | Company | Available | Guarded |
WRK-03elan1 Work
Any change can be undone for 30 days, and the undo is checked too.
DEC-03elan1 Decide
Answers in under 800 ms, 95 times in 100.
GOV-01elan1 Govern
Every agent action gets one of 3 outcomes: allow, ask a person, refuse.
GOV-07elan1 Govern
A refusal costs 40% of one governed action.
RUN-01elan1 Run
10 capability contracts, each with at least 2 open-source implementations.
CO-01Company
Customer data is hosted in AWS Mumbai across 3 availability zones, with no US region.
Security and data residency
Customer data is processed in AWS Mumbai, across 3 availability zones, with no US region. elan1 Run can also run in your own cloud account in India, or in an operator’s data centre in the Mumbai region.
No model sits in the path that allows an action: your rules and a person you name do. An error refuses, so a fault stops work rather than letting it through.
We hold no security certifications today, and say so.
Assurance levels
How far you can check a claim without trusting us. Every row in the claims register carries its level.
Guarded· Level 1
The claim is ours, written down and signed off. You check it against our documents and contracts.
15claims in the register today
Attested· Level 2
The claim leaves evidence in the record, and your auditor can test it offline, without asking us.
11claims in the register today
Proven· Level 3
A third party has audited the claim and put its name to the result. No claim is at this level today.
0claims in the register today
How elan1 Govern records are signed and chained, and the assurance modes for each deployment, will be set out in the developer documentation, which opens at launch.
Roadmap
The roadmap gives an order, not promises. We announce a date when it is firm.
Platform
elan1 Work, Decide, Govern and Run, on one real process each, before general availability.
elan1 Work
The next system elan1 Work changes, after Frappe/ERPNext and Twenty CRM.
elan1 Work
We announce dates when they are firm.
elan1 Run
For public sector and regulated buyers who cannot use a cloud account.
elan1 Run
Opens on a signed contract, never a forecast.
elan1 Run
Opens on a signed contract, after the Gulf region.
Disclosures
What we charge for, what is illustrative, and what we used to call things.
A refusal costs 40% of one governed action. A refusal goes through the same checks and leaves the same record as an action that goes through, so it is not free. We publish refusal rates next to cost, so a rising bill is never hidden inside a rising refusal rate.
Kolam Components is a fictional fasteners distributor in Coimbatore. Every supplier, bill, name and amount in See a governed action, in the specimens and on our product pages is illustrative. Illustrative material is always captioned as such.
The four platform names are unchanged. Their descriptors became shorter and plainer in November 2026.
| Before | Now |
|---|---|
| elan1 Work · Enterprise Intelligence Platform | elan1 Work · Agentic enterprise automation for ERP and CRM |
| elan1 Decide · Decision Intelligence Platform | elan1 Decide · Decision intelligence |
| elan1 Govern · Governed Intelligence Platform | elan1 Govern · Agent governance and assurance |
| elan1 Run · Infrastructure Intelligence Platform | elan1 Run · Sovereign agent infrastructure |
Earlier internal codenames are retired from public pages. If you meet one in an old document, it refers to one of the four platforms above.
rung1, DecideFlow, stack1 and GIP were retired from public use on 6 October 2026.
In November 2026 the elan1 disc changed from Clay to Crimson. Its shape, size and position did not change.
None of the four platforms is generally available today. We name no customers, show no logos and quote no results until they are real and approved in writing. Where a story belongs, the page says so and invites a design partner instead.
A design target is a figure the design aims for, such as an answer in under 800 ms, 95 times in 100. A modelled estimate is calculated, not measured. Both are labelled wherever they appear, and neither is a measurement of a live system.
Every market or regulatory figure we quote carries its source, and is checked against the primary source before it is published.
We hold no security or AI-management certifications today. When an audit starts, we will list its scope here before any result.
Verify
Your auditor can verify an elan1 Govern record offline, with one command, without trusting elan1.
Terminal
govern verify kolam-2026-11.record412 records · 16 fields each · signatures validChain intactContacts
We reply within 2 working days. Grievances are resolved within one week.
Trust FAQs
Customer data is processed in AWS Asia Pacific (Mumbai), across 3 availability zones, with no US region. elan1 Run can also carry the whole stack inside your own cloud account in India, or an operator's data centre in the Mumbai region. New regions open only on a signed contract, never on a forecast.
Who may access your data is set in your contract with elan1; ask about your case through elan1.ai/contact. By design, personal data is masked before any model reads it, agents never hold the credentials to your systems, and with elan1 Run the data and the keys can stay in your own cloud account in India.
Whether any customer data may be used to train or tune a model is decided per contract, not by a default stated on this site. What elan1 states today is that personal data is masked before a model reads it and stays in-region. To ask about your case, write to us through elan1.ai/contact.
No. In the elan1 design, a model may propose an action but never allow it. Every agent action is checked against your rules and is allowed, sent to a person you name, or refused, and each outcome is recorded. Anything not clearly allowed is refused, and failures fall toward a human, never toward an action.
Every claim on elan1.ai is listed once in the claims register, with its type, its status and how to check it. None of the four platforms is generally available yet, elan1 holds no security certification today, and it names no customers until they are live and have approved it in writing.
Start with one process. Add the next when it holds.