One runtime
Same Bolt + Aeira binaries everywhere. The vertical isn't a fork of the product; it's a configuration of the same Authority Policy SDK and the same audit chain.
By industry
Built for the rooms where vendor cloud isn't an option.
Defense. Federal civilian. BigLaw. Regulated finance. Healthcare M&A. EU institutions bound by DORA, GDPR, and the next wave of EU AI rules. Same Bolt and Aeira runtime across all of them. The vertical pages below name the compliance bar each one ships against, and the workflows the founding team has built for.
Pick your industry
Six verticals, one platform.
Each page below contains a 1-page printable brief, the compliance frameworks Sparcle ships against in that vertical, the workflows the founding team has built for, and the trust-center artifacts most relevant to that vertical's CISO.
ITAR · CMMC · IL4/IL5
Defense
Sovereign AI for classified, controlled, and ITAR-bounded workloads. Air-gap capable, BYO LLM mandate, key custody under your KMS.
FedRAMP roadmap · StateRAMP · FISMA
Federal civilian
Designed for federal civilian agencies and contractors that cannot route prompts through a vendor cloud. Sovereign cloud deployments, agency-held keys, and a defensible FedRAMP path.
HIPAA · 21 CFR Part 11 · HITECH
Healthcare
Structured PHI identifiers are masked before any LLM call, names and narrative once the optional on-prem name model is on, and PHI does not transit Sparcle infrastructure. BAA-ready architecture, per-person erasure with a signed receipt, per-tenant crypto-shred, audit-trail responses your compliance team can sign off on.
SOX · FINRA 4511 · SEC 17a-4 · GLBA
Financial services
Per-tenant cryptographic disposal that keeps SOX/SEC records on the shelf, plus per-person GDPR Art. 17 erasure with a signed receipt. WORM-eligible audit chain, customer-held keys, sovereign deployment.
DORA · GDPR · NIS2 · MiCA
EU finance
EU-region key residency, customer-held KMS, audit-chain artifacts your DPO can verify without leaving the bloc. Built for the Operational Resilience Act and the next generation of EU AI rules.
Attorney-client privilege · Matter ACL · Conflicts
Legal
Privileged data stays inside the matter that owns it. Per-matter ACLs, conflicts-of-interest gates at the retrieval layer, and an audit chain that the partner-in-charge can read end-to-end.
What's consistent across every vertical
The product doesn't fork. The compliance bar does.
Sparcle ships one Bolt and one Aeira. Every vertical configuration sits on the same runtime, the same audit chain, and the same customer-held boundary. What changes is the Authority Policy ranking pack, the connector set, the data-residency configuration, and the regulatory framing on the trust center artifacts.
One audit chain
The same Ed25519-signed Merkle audit chain records the same events in every vertical. The standalone verifier runs against any tenant's chain, regardless of industry.
One boundary
Customer perimeter is the boundary in every vertical. Customer holds the KMS keys, the IdP, the LLM endpoint. Sparcle ships software; Sparcle does not host customer data.
Two products
Bolt for the governed agentic platform. Aeira for the substrate.
Most prospects evaluate Bolt and Aeira together; some buy one or the other. Both products work across every vertical above.
Bolt: Extensible & Governed Agentic Platform
The launcher, the agent loop, the prompt assembly, the PII masking layer, the multi-layer security pipeline. Bolt is the runtime your users interact with; runs inside your perimeter with your LLM. Most queries are handled by deterministic, on-device recognition and never touch a model. The agentic path is one mode, not the only mode.
Aeira: ACL-aware substrate
The 8-axis ACL pre-filter at index time, the keyword + vector + graph retrieval, the Authority Policy SDK, the cryptographically-verifiable audit chain. Aeira is the data plane Bolt rides on, or any MCP-compatible client can ride on.
Want a walk-through against your specific compliance bar?
A 30-minute vertical architecture review covers your data-residency requirements, your IdP and KMS posture, the workflows that matter for your team, and a candid read on whether Bolt and Aeira ship for your environment yet.