Frequently Asked Questions

It's when AI makes something up but says it like it's true. For example, an AI chatbot might give medical advice that sounds correct but is actually wrong or dangerous. The AI doesn't know it's lying — it just generates text that sounds good. This happens more often than you'd think, and when someone gets hurt, they blame you.

Regular logs can be changed or deleted without detection. With ProlixoTech, records are cryptographically signed the moment they're created. Not even we can alter them. That's what makes it tamper-evident, audit-ready evidence.

In Canada, the CPCSC (Canadian Program for Cyber Security Certification) becomes mandatory for new DND contracts starting April 2026. Level 1 requires self-assessment against 13 ITSP.10.171 controls. Level 2 requires third-party certification of all 97 controls starting April 2027. In the US, CMMC 2.0 imposes parallel requirements for DoD contractors. The Caremark doctrine also requires boards to implement reasonable oversight systems for material risks.

ProlixoTech doesn't prevent AI mistakes — no one can do that. What it does is prove you weren't careless. If your AI gives bad advice, you can show: "Here's exactly what it said, here are the safety rules we had in place, and here's proof we were monitoring it." That's the difference between "you were negligent" and "it was an unfortunate accident despite your best efforts."

Think of it like a security camera for your AI. Every time your AI talks to a customer or makes a decision, ProlixoTech automatically takes a snapshot with a timestamp. This snapshot is then "sealed" using special technology (like a digital notary stamp) so no one can tamper with it. If anyone ever questions what your AI said, you have proof.

Most companies are up and running in less than a day. Your tech team adds a few lines of code to connect your AI system to ProlixoTech. There's no complicated setup, no hardware to install, and no training required. Once connected, everything happens automatically in the background.

No, not at all. ProlixoTech works quietly in the background. Your AI responds to customers just as fast as before. Your users won't notice any difference. We designed it this way because we know speed matters — we'll never be the reason your AI feels slow.

Any AI that talks to customers or makes decisions. This includes chatbots, customer service AI, AI assistants, recommendation engines, content generators, and more. If you're using OpenAI, Anthropic, Google AI, or your own custom models — ProlixoTech works with all of them.

It's an official document we create for you every month. Think of it like a report card that says: "This organization was collecting evidence and had controls in place." You can print it, show it to your board of directors, or hand it to auditors. It's your receipt that proves you did everything right. Available on CPCSC Level 2 and CPCSC Level 3 plans.

AI laws change constantly. If you're sued in 2028 for something your AI did in 2025, the plaintiff's lawyer will try to judge you by 2028 standards — that's not fair. The "Time Machine" Defense solves this. We capture a cryptographic "snapshot" of your exact safety rules at the millisecond of each AI decision. In court, you don't just say "we were safe" — you provide a SHA-256 hash that proves your 2025 policies were followed to the letter.

Standard database logs can be edited. A lawyer will claim you "Photoshopped" your logs after the accident to make yourself look innocent. Our "Digital Wax Seal" makes that attack fail. We use AWS Hardware Security Modules (the same technology banks use) to digitally sign every log. The private key never leaves Amazon's physical hardware — it's literally impossible for anyone to export it or fake a signature. Combined with special formatting rules (RFC 8785), your evidence is unimpeachable.

Boards increasingly need documentation showing compliance oversight programs are in place. Our monthly "Certificate of Truth" helps with this. Each month, we generate a signed document containing cryptographic proof of compliance activities across your CPCSC controls. This supports your documentation of reasonable oversight — but consult legal counsel for specific compliance requirements.

No — we use asynchronous background processing to minimize overhead on your application. Developers hate when security tools slow things down. If logging makes your chatbot take an extra 200ms to respond, users will notice and complain. We designed ProlixoTech like a "dashcam" — it captures evidence in microseconds without blocking your main application. Your AI "throws" the log into memory and continues immediately. A background process handles the rest invisibly.

Yes — our sharded architecture handles enterprise-scale event volumes. Traditional logging creates a bottleneck. If 10,000 users log at once, they form a single line, causing the database to crash. That's a disaster during your big product launch. We use a technique called "Probabilistic Write Sharding" — think of it like having 20 checkout lanes instead of one. Logs are distributed across parallel channels so no one waits in line.

Storing millions of tiny log files directly in S3 incurs per-object overhead costs. We solved this with smart batching. Using Kinesis Data Firehose, we compress many small logs into columnar Parquet blocks before archiving. These blocks then transition through S3 storage tiers (Standard → Infrequent Access → Glacier) for long-term compliance retention at optimized costs.

You do. 100%. We store it securely on your behalf, but it's your data. We never sell it, share it, or use it for anything except protecting you. You can export it anytime, and if you ever leave (though we hope you won't), you can take your records with you.

Your data is encrypted both at rest (AES-256 via AWS KMS) and in transit (TLS). We follow security best practices aligned with industry standards, including role-based access controls and audit logging. Multi-factor authentication is available and recommended. Only you and the people you authorize can access your records.

CPCSC (Canadian Program for Cyber Security Certification) is Canada's framework for certifying cyber security practices among defence supply chain organizations. It is based on ITSP.10.171, Canada's adaptation of NIST SP 800-171 Rev 3. CPCSC is mandatory for all Canadian DND suppliers and is administered by the Canadian Centre for Cyber Security (CCCS).

Level 1 (self-assessment) becomes mandatory in April 2026. Level 2 (third-party assessment) is expected to follow in spring 2026 and beyond, with Level 3 (government-led) in 2027. Organizations bidding on DND contracts that handle controlled information must demonstrate CPCSC readiness by the applicable deadline.

CPCSC is our primary focus. CMMC support for cross-border contracts is on our roadmap. Since both CPCSC and CMMC share a common foundation in NIST SP 800-171, evidence you collect today for CPCSC carries across both frameworks.

Solymus has three tiers, all priced in Canadian dollars (CAD):

• CPCSC Level 1 — FREE for a limited time. CPCSC Level 1 readiness (13 controls). Up to 1,000 events/month, 3 seats, 1 workspace. 365-day retention during 2026 promo.
• CPCSC Level 2 — C$5,000/month (early bird, standard C$10,000/mo). CPCSC Level 2 readiness. Up to 100,000 events/month, 10 seats, SSP + POA&M exports, and guided onboarding. Early bird pricing until Dec 31, 2026.
• CPCSC Level 3 — C$5,000/month (early bird, standard C$30,000/mo). For primes, MSPs, and multi-entity organizations. Unlimited workspaces, SSO/SAML, dedicated support. Early bird pricing until Dec 31, 2026.

Yes! CPCSC Level 1 is completely free — just add a credit card to activate your account. You won't be charged. You get full access to Level 1 control mapping, evidence upload, readiness dashboard, and tamper-evident evidence records. For Level 2 and Level 3, we also offer a complimentary readiness briefing — book a call and we'll walk through your organization's CPCSC posture and show you the platform live.

Yes. You can upgrade or downgrade your plan at any time. If you upgrade, you get access to new features right away. If you downgrade, the change happens at the end of your billing period. All your existing data stays safe when you change plans.