Your cloud · S3 / Azure Blob
Source of truth
- 📄contract-2026.pdf· high
- 📄q4-deal-pipeline.csv· med
- 📁patient-charts/· PHI
- 📄employees-hr.xlsx· high
- ·… 12,442 more
BYTES NEVER LEAVE THIS BOUNDARY.
Available now in private preview
Answers with reasons.
A field manual for explainable AI — every answer ships with its receipts.
Pollenix is a deployable platform with a small Core, five licensed satellites, and the Why Engine at the centre. Every answer comes with a trace, drivers, citations, and a confidence band.
Files never leave your cloud. We gain coverage — metadata, ACLs, sensitivity — not consumption. Deploys into your AWS or Azure tenant from the marketplace.
II. The Why Engine
Every answer is a citation.
Trace, drivers, counterfactuals, confidence — surfaced for every interaction.
We instrument every step the model takes. Retrieval scores, SQL plans, tool calls, DLP decisions, cost, latency. Then we layer attribution so you can see which dimensions moved the answer, and counterfactuals so you know how stable the answer is.
<span class="trace-line"><span class="text-[var(--color-ink-subtle)]">→ user.ask</span> <span class="text-[var(--color-ink)]">"why is APAC revenue down vs last quarter?"</span></span>
<span class="trace-line"> <span class="text-[var(--color-honey-500)]">01</span> <span class="text-[var(--color-ink-subtle)]">retrieval</span> matched <span class="text-[var(--color-ink)]">3</span> columns score <span class="text-[var(--color-leaf-500)]">0.72</span></span>
<span class="trace-line"> <span class="text-[var(--color-honey-500)]">02</span> <span class="text-[var(--color-ink-subtle)]">llm_call</span> sql-gen · gpt-4o <span class="text-[var(--color-pollen-500)]">$0.003</span> · <span class="text-[var(--color-ink-muted)]">1.2 s</span></span>
<span class="trace-line"> <span class="text-[var(--color-honey-500)]">03</span> <span class="text-[var(--color-ink-subtle)]">sql</span> executed <span class="text-[var(--color-ink)]">442 rows</span> · <span class="text-[var(--color-ink-muted)]">18 ms</span></span>
<span class="trace-line"> <span class="text-[var(--color-honey-500)]">04</span> <span class="text-[var(--color-ink-subtle)]">driver</span> <span class="text-[var(--color-ink)]">Region=APAC</span> <span class="text-[var(--color-wasp-500)]">−9.0 pp</span></span>
<span class="trace-line"> <span class="text-[var(--color-honey-500)]">05</span> <span class="text-[var(--color-ink-subtle)]">driver</span> <span class="text-[var(--color-ink)]">Segment=Enterprise</span> <span class="text-[var(--color-wasp-500)]">−2.1 pp</span></span>
<span class="trace-line"> <span class="text-[var(--color-honey-500)]">06</span> <span class="text-[var(--color-ink-subtle)]">counterfact.</span> prior quarter <span class="text-[var(--color-leaf-500)]">+4.4 pp</span> delta</span>
<span class="trace-line"> <span class="text-[var(--color-honey-500)]">07</span> <span class="text-[var(--color-ink-subtle)]">guard</span> dlp.passed · auth_ctx valid <span class="text-[var(--color-leaf-500)]">ok</span></span>
<span class="trace-line"> <span class="text-[var(--color-honey-500)]">08</span> <span class="text-[var(--color-ink-subtle)]">citation</span> sf_opportunities × sf_accounts <span class="text-[var(--color-ink-muted)]">442 / 442</span></span>
<span class="trace-line"><span class="text-[var(--color-ink-subtle)]">← answer</span> drafted, cited, safe to send.</span>
Confidence
0.82
retrieval 0.72 logprobs 0.81 stability 0.91
/ accessible at GET /api/v1/why/{interaction_id}
III. Coverage, not consumption
Files stay in your cloud.
We index folders, ACLs, sensitivity. Never the bytes.
Coverage is the inverse of ingestion. We list, we classify, we map who can read what — and we stop there. Content reaches the model only on demand, on-behalf-of the asking user, with an audit trail and a DLP gate. No background sync. No silent copies. No cache.
OBO
per request
Pollenix Coverage
Metadata. Only.
- paths
- 12,447 indexed
- acl graph
- 2,108 principals
- sensitivity
- PII · PHI · financial · custom
- vectors
- filenames + folder summaries
- content
- on-demand only
ZERO PERSISTENT COPIES.
i. Isolated mode
Per-user prefix. Only the owner can list, only the owner asks. Useful for the "my desk" workspace.
ii. Shared mode
Role / team scoped. ACL-driven visibility. The same coverage view for everyone allowed to see it — never more.
IV. Satellites
A small Core. Five satellites.
Each module licensed independently. Toggle on, toggle off, deploy what you need.
Pollenix Core is always on — Why Engine, AuthContext, Connector Bus, Coverage, DLP, Personality. Everything else is a satellite that loads at startup based on your license. No bundled bloat. No "available in enterprise" fog. Just a SKU.
- I. Structured data engine
DB
Snowflake, Redshift, BigQuery, MSSQL, Oracle, Postgres, MySQL, Databricks, DuckDB. JOIN auto-detection, schema graph, query playground.
pollenix.db learn → - II. Dashboards & sentient
BI
Grafana orchestrator, executive dashboards, Sentient panels with the 3-phase data fetch — metadata first, populate second.
pollenix.bi learn → - III. EMR / EHR · regulated
Health
OpenEMR, FHIR, separate KMS key, separate audit table, BAA-friendly logging. Ships behind its own license SKU.
pollenix.health learn → - IV. Contracts & risk
FinTech
Clause-by-clause contract diff with semantic alignment, risk surfacing, and natural-language follow-ups over the diff.
pollenix.fintech learn → - V. Infra · security
Ops
SSL scans, infra shield, scheduled scans with credential trend dashboards. The least-glamorous module that you'll quietly love.
pollenix.ops learn → - VI. Reserved
Yours.
Build a satellite for your domain on the Pollenix SDK. The Why Engine and AuthContext come for free. We co-list it on the marketplace.
partners@pollenix.ai →
V. Posture
Safety as a load-bearing wall.
The Why Engine is the differentiator; the security model is the floor.
- 01 ≤ 5 min · single-use
AuthContext
Every tool call carries a vault-signed JWS that authorizes exactly the operation. No standing privilege. Replay-safe via Redis-backed nonces.
RS256 · capability grammar · nonce-protected
- 02 Per-tenant DEK · health key isolated
Vault-derived keys
Sensitive columns are encrypted with per-tenant DEKs derived from a vault-loaded ROOT_DATA_KEY. Searchable equality via blind indexes — never decrypt to filter.
AES-256-GCM · HKDF · versioned rotation
- 03 Presidio · spaCy · custom recognizers
DLP that stops the leak
Three modes per role: detect-and-warn, detect-and-mask, detect-and-block. Logs run through the same pipeline so PII never lands in your observability stack.
PII · PHI · financial · custom
Audit chain HMAC-linked rows · tamper-evident · Compliance SOC 2 in flight · HIPAA-ready Health module · BAA on request · Vendor AWS SM · Azure KV · GCP SM · HashiCorp Vault
VI. Available now
Deploy in your tenant. Not ours.
One-click from your cloud's marketplace. Single-admin onboarding in 90 seconds. License auto-issued.
Amazon Web Services
AWS Marketplace
CloudFormation Template + AMI. Vault setup is a one-click external-id handshake. Lands inside your VPC.
EKS · ECS · EC2 · S3 Vectors · Secrets Manager
View on AWS
Microsoft Azure
Azure Marketplace
ARM template + AKS chart. Transactable SaaS Offer. Subscription token binds your tenant on first sign-in.
AKS · Container Apps · AI Search · Key Vault
View on Azure
Other clouds, on-prem, or air-gap? talk to us →
VII. Get in touch
Tell us what you're trying to figure out.
We answer every legitimate inquiry within one business day.
Whether you're sizing up a marketplace deploy, weighing the Health satellite for a regulated workload, or just want to see the Why Engine run against your own questions — leave your work details and we'll reach out.
- General
- hello@pollenix.ai
- Sales
- sales@pollenix.ai
- Security
- security@pollenix.ai Responsible disclosure · PGP on request
- Partners
- partners@pollenix.ai Build a Pollenix satellite
By submitting, you agree to our Privacy Policy and Terms of Service. We don't sell, share, or stockpile lead lists.