Adarve Enterprise
LLM security your auditor can read.
For regulated mid-market companies in the EU and LATAM that already run an LLM in production: versioned policies, DLP with local identifiers, SSO, roles and a hash-chained audit log. Run by Adarve in the EU, on a dedicated instance when you need one.
- Prompts are never stored in clear text
- Dedicated single-tenant EU instance
- Powered by Adarve Engine
Who it is for
Sectors where a badly handled prompt is an incident.
Teams of 50 to 2,000 people, with oversight obligations and no army of ML engineers.
Fintech and banking
Support and back-office assistants that touch IBANs, balances and KYC. DORA asks you to control your ICT providers and to be able to prove it.
Legaltech
RAG over contracts and case files: third-party documents that can carry hidden instructions and personal data.
Insurtech
Claims and underwriting with health data and national identifiers (DNI/NIE, CURP, RUT, CPF) in the same flow.
What is included
Controls, not promises.
Every piece leaves a trace you can check in the console or through the API.
Projects and versioned policies
One project per application. Every rule change creates an immutable version; shadow mode trials rules without touching the score.
Custom rules and canary tokens
Phrases, RE2 regexes and denied topics. A canary planted in your system prompt exposes any leak with score 1.0.
PII and secrets DLP
DNI/NIE, CURP, RUT, CPF, IBAN, cards, emails, phone numbers and well-known API key formats. Detect, or redact in the gateway.
OIDC SSO
Entra ID, Okta, Keycloak or Google. Allowed domains and mandatory SSO per organisation.
Roles
Owner, admin, developer and viewer. The API enforces permissions; the console only reflects them.
Hash-chained audit log
Append-only: each entry includes the previous entry's hash. One-click verification and CSV export.
Signed webhooks / SIEM
HMAC-SHA256-signed events to your SIEM or chat. Prompt text is never in a payload.
Retention controls
You decide how many days inspection metadata is kept, from 1 to 3,650.
Human review queue
Anything between the review and block thresholds waits for a person. Their decisions measure your real false-positive rate.
Evidence pack
A JSON file with policies, roles, SSO, chain verification and the measured evaluation report, mapped to the frameworks below.
Gateway with Enforce mode
OpenAI-compatible proxy: per project you decide whether it only reports or blocks above the threshold.
Agent and MCP firewall
Tool-output inspection, MCP schema pinning and an exfiltration filter. Details on the agents page.
Control mapping
Controls that support your evidence.
The evidence pack links each control to the article or risk it supports.
| Framework | Reference | Adarve control that supports it |
|---|---|---|
| EU AI Act | Art. 12 | Hash-chained audit log, configurable retention, per-inspection metadata |
| EU AI Act | Art. 14 | Human review queue, per-project thresholds, shadow mode |
| EU AI Act | Art. 50 | Output inspection and canary tokens to detect system-prompt leaks |
| DORA | Art. 28 | Dedicated EU instance, documented subprocessors and a provider evidence pack |
| DORA | Art. 30 | Documented SLA, audit and evidence export |
| OWASP LLM Top 10 | 2025 | LLM01 prompt injection, LLM02 sensitive information disclosure (DLP), LLM07 system prompt leakage (canaries) |
| ISO/IEC 42001 | AIMS | Versioned policies, roles, audit and review as part of your AI management system |
Adarve does not certify or guarantee regulatory compliance. It provides controls and records your compliance team can use as evidence.
Deployment
Operated by Adarve in the EU. You choose the isolation.
Same engine and same console in every option; nothing to install or patch on your side.
Shared EU cloud
Multi-tenant service in an EU region with a GDPR DPA. Free, Pro and Scale plans.
Engine updates with no action on your side
Dedicated EU instance
A single-tenant stack only for your organisation: its own database, keys, network and engine capacity. Enterprise plan.
No infrastructure shared with other customers
Private connectivity
On request for banks and insurers: your preferred EU region, private network links and IP allow-lists — still operated by Adarve.
Traffic off the public internet
Shall we talk to your security team?
A 30-minute technical demo of the console, the API and your audit questions. No sales deck.