For the CHRO · Head of People

Use AI on people data. Safely.

Your team holds the most sensitive data in the company, and they’re already pasting it into AI to draft reviews and letters. Bolt is the SuperAgent that lets them, with the SSN and contact details masked before any model sees them, and the salary, name and review text never leaving your boundary.

View this as a deck All roles A 90-second buy-case · Empower · Govern · Audit

On this page

The crux

Your team works across a dozen systems and a browser full of tabs. Bolt is one AI SuperAgent that reaches them all. It recognizes what’s in front of you, does the work in a keystroke, and reaches for the model last, so your data stays protected, your tokens stay spent only when they must, and the work just gets done.

Built for the AI age

Empower. Govern. Audit.

The three things an enterprise actually needs from AI at work, in one SuperAgent, not three products.

Empower

Get work done in one keystroke: recognize, compute, search, ask, act across every system. Most everyday answers resolve on-device, at zero tokens.

Govern

PII masked at the model boundary, RBAC over systems and models, identity passthrough, and admin kill-switches on every connector, model and capability.

Audit

What the AI did, recorded and offline-verifiable: answer “what did AI touch?” the instant you’re asked.

The data you’re responsible for

The most sensitive data in the building, in an AI tab

HR runs on PII. The fastest way to draft anything is to paste it into a model. That’s the exposure.

SSNs, comp and reviews, pasted

Performance notes, salaries, social security and health details, typed into a consumer model with no masking and no record.

Employee-data law, on the line

GDPR employee notices and works-council rules don’t bend because it was convenient. An unlogged paste is a violation.

No answer when an employee asks

When someone exercises their rights and asks “what did AI do with my data?”, you have nothing to show.

Once it’s pasted, it’s gone

Out of the laptop, into a model: cached, trained on, outside your control.

One SuperAgent, every system

Connect everything, 1st- and 3rd-party, into one governed surface

Your apps, your models, your tools and agents, even the in-house app only you run, reached as you, governed by IT, audited for everyone.

The governed hub

Bring your systems, your models and your tools, under one policy

Any system, even your in-house apps

Email, docs, tickets, CRM, code, data, and the internal app only your company runs, connected through open MCP, not a fixed catalog you wait on us to extend.

The models you choose

Bring your own LLMs and route by policy. The model is reached for last, on your terms, never by default.

MCP, agents, skills & apps

An open hub your org extends: connect any HTTP MCP server, push the approved tools and agents, and kill-switch the rest.

Identity passthrough

Bolt acts with your identity and respects your access. You see only what you’re allowed to, in every connected system.

RBAC over everything

Admins govern who can reach which system, model, tool and skill, by role, department and group.

Audited & distributed centrally

Roll the hub out to the org, change it once, and keep a tamper-evident record of what the agent did, who approved it, and who was signed in.

Governed AI

Draft the review: a detected SSN is tokenized before the prompt leaves your boundary

HR can use AI on real records without leaking the identifiers in them. SSNs, emails and account numbers are masked before the prompt, and because it runs on your own LLM inside your boundary, the name, the comp figure and the review text never leave the company either. Fixed-format employee IDs can be masked too, via a custom pattern.

pii employee-data governed

The shift

Same speed for the team. A boundary for the data.

HR with shadow AI

Fast, and exposed

  • SSNs, comp and reviews reach a third-party model
  • Employee data leaves the device and never comes back
  • No record when an employee exercises their rights
  • Works-council and GDPR exposure on every paste

With Bolt

Just as fast, fully governed

  • PII masked before any model sees it
  • Most everyday answers resolve on-device. Nothing leaves
  • HRIS reached as the user, with their permissions
  • Agent turns, tool calls and approvals in a tamper-evident, answerable log

Why it’s safe to say yes

You don’t trade control for speed. You get both

Every AI tool promises productivity. Bolt is the one built so the security review passes.

Masked gated identity-aware audited in your boundary

Governed by design

The six things that make it deployable

PII masked at the model boundary

Emails, SSNs, card and account numbers and keys are tokenized before any model sees them and restored in the answer, and free-form text stays on your own LLM, inside your boundary. The tool gets the real value; detected identifiers are tokenized before the model.

Identity passthrough

Bolt acts with your identity and respects your access, every connected system shows you only what you’re permitted to see.

RBAC over systems, models & tools

Capabilities gated by role, department and group, with admin kill-switches (even proactive AI suggestions can be turned off org-wide).

A tamper-evident audit trail

The agent’s turns, tool calls and approvals are recorded and exportable, a portable proof you can verify offline, built for the auditor in the room.

You define the boundary

No Sparcle server sits in the path. Deploy in your own infrastructure (Helm / Docker) or fully on-device.

The model is reached for last

Most answers come from on-device recognition at zero tokens. The LLM is the exception, not the default, less spend, less exposure.

What changes

The numbers your works council will ask about

100%

of AI prompts run through masking

structured PII tokenized before the model; the rest stays in your boundary
Most

answers never reach a model

on-device recognition · zero egress
0

employee data sent to Sparcle servers

your boundary, start to finish

Free, but governed

Put it in every hand for free. Keep every action under control

The SuperAgent is free to deploy. The governed server is the part you don’t want to skip, it’s the difference between an AI tool and an AI tool your security team can sign off on.

Free client

Productivity for everyone

  • Runs on every desktop, no per-seat AI bill
  • Hundreds of instant answers with zero tokens
  • The whole work surface: recognize, compute, search, ask
  • Nothing to lose by rolling it out widely

Governed server

Control your security team will sign off on

  • Every AI prompt masked at the boundary
  • RBAC over systems, models, tools and skills
  • Agent turns, tool calls and approvals in a tamper-evident audit log
  • Data stays in your infrastructure, never ours

People data stays people data

AI on HR data, without the HR data leaving.

Names, salaries and case notes are masked at the boundary before any model sees them, and the record of who asked what survives the conversation.

The ask · Empower · Govern · Audit

Give your team the SuperAgent. Protect every employee.

Roll out the free SuperAgent so HR can draft and summarize at speed. Switch on the governed server and every SSN, salary and name your team touches with AI becomes masked, gated and audited, so you can answer the employee, the regulator and the works council with a record, not a shrug.

Free

SuperAgent for every HR partner

1

boundary around employee data

0

employee data sent to Sparcle servers

Every other seat

Same platform, argued from where you sit

Each role page makes the case in that role's own language, and links back here.

See it on your own data

Bolt runs inside your perimeter, on the LLM you choose.