HodeiShield

In the EU: application, database and storage managed by OVH in Gravelines, France. Cloudflare, a US company, acts as DNS, CDN and TLS in the request path.

You don't have to trust us: it verifies offline with an open-source verifier (Apache-2.0) and the public key. The signature is ML-DSA-65 (FIPS 204). It proves integrity, origin and time; it doesn't prove that what's attested is true, and it doesn't replace an audit.

No. Third-party risk management is one of the eleven solutions. The same loop measures the posture of your own endpoints with an agent, matches CVEs against your assets, logs and classifies incidents against DORA, NIS2 and GDPR, measures 17 frameworks and prepares the board dashboard and reports.

No. The agent reports per cycle, vendor scans are periodic based on criticality and CVE sync runs daily. Evidence that stops arriving expires and stops counting.

No. HodeiAI proposes and a person with a write role approves every execution, with a single-use approval valid for 15 minutes and bound to the proposal's hash. Today the only executable action is creating a risk register entry. Autonomous execution is blocked and the kill switch fails closed.