TESS
DESign inBook a demo

Your data lives on its own.

Your processes reveal how your company works. TESS keeps them safe on servers in Germany and, if you wish, on-premise. Every access follows a role and every change is recorded in a log that cannot be altered. And no language model gets to see what your systems deliver.

Your processAccessby roleLog withchecksumGermany oron-premiseNo languagemodel reads along
2factors at sign-in, can be required for everyone
0delivery contents go to a language model
256bitAES-GCM for credentials to your systems
4times a yearrestoring from backup is rehearsed

A log that cannot be rewritten.

Every change is recorded, with person and time. The entries are chained by a checksum. If one is missing or has been altered, checking the chain shows it.

  • Every rule change tooWhoever changes a rule can silence monitoring. That is why it is in the log.
  • Sign-ins and role changesReadable for the administrator, as CSV for the audit.
  1. Signed inM. Kellerprevious 0000own 4f1a
  2. Role changedA. Brandtprevious 4f1aown 9c27
  3. Rule changedA. Brandtprevious 9c27own e810
  4. PublishedJ. Wolfprevious e810own 2bd4
  5. Chain verified, complete

“A language model does not need to know your data to understand your process. It gets the structure, never the content.”

Aditya Raj TiwariArchitecture and Artificial Intelligence, Evolvet
More about Evolvet

What happens to a delivery.

From arrival to deletion the original stays unchanged. How long it stays is up to you.

  1. 01ArrivalVia token, credentials or upload. Credentials are encrypted with AES-256-GCM.
  2. 02ChecksumSHA-256 over the bytes, before TESS does anything with them.
  3. 03ArchiveStored byte for byte and only ever served as a file, never rendered in the browser.
  4. 04CheckYour rules run on a working copy. The original stays the original.
  5. 05DeletionAfter the period you set per source. What remains are numbers.

And everything else, to read up on.

Hosted in Germany

  • TESS runs on servers in Germany, operated by Evolvet GmbH in Cologne.
  • TESS is also available on-premise and then runs in your own data centre, under your control.
  • Every night a backup of the data and the archived deliveries is made. Restoring is rehearsed every quarter, and a single customer can be restored on their own.

Sign-in

  • Passwords are stored with Argon2id. Accounts are created by invitation; there is no self-registration.
  • You decide whether a second factor via authenticator app is required: for everyone, only for administrators or optional.
  • Sessions are short-lived, and repeated failed attempts lock the account. A new password ends all previous sessions.

Artificial intelligence

  • For a decision in the process you define per gateway which values the model may read. If it is unsure, a person decides.
  • You choose the provider, including a self-hosted model. Every call is logged, without its content.

Outbound connections

  • Fetches and calls from TESS cannot reach internal networks unless you explicitly allow an address.
  • With SFTP, TESS remembers the server key and stops if it changes.
  • Conditions and rules run in a dedicated, closed expression language. Foreign code is never executed.

This website

  • This website sets no cookies and loads no fonts from third-party servers. We measure reach with Umami on our own server in Germany.

Your IT has questions? Good.

We answer them in the demo and, if you like, talk directly to your data protection officer and your IT.

Book a demo