Privacy [air-gap]
The air-gap keeps your records in the practice.
The Gedō air-gap is the hardware setup of the Sovereign Lab workstation. Its Wi-Fi and Bluetooth hardware is removed or disabled in firmware, it has no inbound or outbound network connection, and all processing happens on the machine itself.
Your practice decides how it meets its health-privacy obligations. This page lists what the machine does and the documentation we prepare for that decision. Gedō reads and drafts; it does not assess or diagnose.
- Wireless
- Removed or disabled in firmware
- Network
- None, inbound or outbound
- Processing
- On the workstation
- Sent to the cloud
- 0 bytes
Isolation [hardware]01 / 04
The workstation has no network connection, wired or wireless.
- Wireless
- Wi-Fi and Bluetooth hardware is removed from the board or disabled in firmware before delivery.
- Network
- The operating system listens only on the loopback interface (127.0.0.1), and outbound routing is locked.
- Telemetry
- Gedō sends no telemetry, crash reports, or diagnostic pings.
- Gedō Search and Gedō Draft
- Gedō runs offline on your own laptop. The hardware changes above apply to the Sovereign Lab workstation.
Retention [storage]02 / 04
Your records, their index, and their transcripts stay on the workstation’s drives.
- Capacity
- 20 TB of storage inside the Sovereign Lab workstation.
- Processing
- Embeddings, model weights, and transcripts are computed and kept on the machine.
- Retention period
- Your practice's records-retention policy sets how long material is kept. We write that period into the retention documentation.
- Encryption
- The Sovereign Lab workstation’s drives are fully encrypted.
- Deletion
- When the retention period or your contract ends, we erase the drives cryptographically to NIST SP 800-88, then return them to you or destroy them. You receive a signed certificate of sanitization and a deletion log for each project.
Review [documentation]03 / 04
We prepare the air-gap and retention documentation your privacy lead asks for.
- Documents
- Sovereign Lab: a vendor attestation signed by Phule’s Armada. Gedō Search and Gedō Draft: self-serve documentation.
- Decision
- Your practice makes it. The documentation describes the machine; it does not certify that a health-privacy law is met.
Access [people]04 / 04
You decide who holds a seat.
- Seats
- Gedō Search and Gedō Draft: one personal seat. Sovereign Lab: five seats, each a keyboard and screen cabled to the workstation.
- Accounts
- You create each person's account on the workstation and close it when they leave.
- Supervision
- The Sovereign Lab keeps an audit log of every seat for the practice lead.
- Phule’s Armada
- We install the Sovereign Lab in person and run two training workshops. With no network connection, we have no remote access after that.