AI assistant · Sovereign copilot

An AI that knows
your company.

A virtual machine you install on-premise: the model runs locally, its knowledge base is fed with your platform, your business and your real data — and every remediation is proposed before it is carried out.

Model running locallyNothing leaves the VM3-layer memorySuggestion before action
Local
the model runs on-premises
3 couches
platform · business logic · your data
0
action sans votre validation

A generic assistant knows neither your IS, nor your rules, nor your obligations — and it sends your questions somewhere else. This one is a VM you install on your own hypervisor: the model runs on-premise, it reads your platform, your business and your real data, and when it proposes a remediation, you are the one who presses the button.

How it works

From threat to evidence, in real time.

The module captures the signal, SYLink AI correlates it and decides — you keep control.

Your data
Platform · business logic · tenant
AI assistant
Local model, inside the VM
Suggestion
Dry run + audit
You approve
Nothing leaves without you
Capabilities

The technology, in detail.

What the module actually does — functions, not promises.

A model hosted by you, not elsewhere

  • Virtual machine on your hypervisor
  • Model running locally (GPU recommended)
  • No request to a third-party service
  • Activation and signed updates
  • Hardened base, configuration console

A three-layer memory

  • Platform base: products, flows, where data is
  • Cyber corpus: ANSSI, NIS2, MITRE ATT&CK
  • Business: sector processes, risks and obligations
  • Real tenant data via the UniSOC API
  • Sourced answers, no invention

A supervised remediation

  • Suggestion, then validation, then execution
  • Limited scope and systematic dry run
  • Audit log for every action
  • No destructive action without explicit approval

Your accesses stay yours

  • Firewall and server access provided by you
  • Encrypted at rest in the VM
  • Optional configuration: the assistant works without it
  • No secret leaves your infrastructure
Use cases

What is it actually for?

Answering 'what happened last night?'

The assistant reads your alerts, assets and real traffic flows, and narrates the incident with its sources — rather than a plausible summary.

Suggest the fix, not just the finding

The firewall rule or isolation step is prepared, dry-run, presented — and only executed if you confirm.

Keep data inside

Law firm, local authority, critical industry: both question and answer stay in the VM, with no Cloud Act dependency.

The method, in four steps
From raw signal to defensible evidence.
Detect
Understand
Decide
Prove
01The module captures the raw signal — traffic, behaviour or indicator.signal captured
Specifications
FormatVirtual machine on your hypervisor
ModelRuns on-premises (GPU recommended)
MemoryPlatform + business logic + tenant data
Infra accessOptional, encrypted at rest
RemediationSuggestion → validation → traced execution
SovereigntyNothing leaves the VM
Natively integrated with
SYLink AI — the SOC brain, platform side
EDR agent — endpoints and response actions
DPI probe — real network traffic
AI Firewall — proposed then validated rules
Compliance module — sector obligations
Sovereign

Driven by SYLink AI, hosted 100% in France (HDS v2), with no Cloud Act exposure. Every decision is logged and defensible under NIS2 and DORA.

Live in under 48 hours

Ready to see what is really
happening on your network?

First trial free, no credit card, no commitment. On your existing infrastructure.

Cookie settings

We use cookies to improve your experience on our site. By continuing to browse, you accept our privacy policy and our use of cookies under the GDPR.