Early access is open for EU organisations protecting 100 or more users.Get Early Access
Deltawall
For the CISO

Close the AI data gap without adding infrastructure.

Enforcement at the point of interaction, deployed as a managed extension. No proxy, no root certificate, no kernel driver, and no network change to justify to the board.

A security lead reading the Deltawall posture dashboard in an open-plan office.
What you are accountable for

Visibility, control and proof.

Visibility

Where sensitive data meets AI, by department, data class and destination.

Control

Risk-adaptive guardrails from Log to Block, simulated before they enforce.

Proof

Tamper-evident evidence the board, the auditor and the regulator can verify.

Why existing controls miss it

Your stack secures the connection. Deltawall secures the interaction.

The risk is a paste into a text box, inside an encrypted session, on a sanctioned site. Each layer of a modern stack is right about what it sees, and blind to that moment.

ApproachWhat it secures wellWhat it missesHow Deltawall is different
SASE and SSENetwork access, connectivity and application-level policyThe prompt, the paste and the upload inside an encrypted session to a permitted siteInspects the interaction in the page itself, before the request is sent
Proxy and SWG with TLS inspectionRouted web traffic, URL and category filteringRequires a root certificate on every device and decrypts everything; still sees a request, not who typed whatNo root certificate, no decryption, no rerouting. Enforcement runs inside the browser sandbox
CASBSanctioned SaaS through APIs: configuration, sharing and postureReal-time text input into AI tools, and personal accounts that never touch the APIActs on the prompt at submit, whichever account is signed in to the AI site
Endpoint DLP and EDRFiles, processes, devices and removable mediaFile-less actions: typed prompts and text pasted into a web formTreats typed and pasted text as a first-class data flow, and scans files on the device before upload

Deltawall complements these controls; it does not replace your network, identity or endpoint stack.

How pricing works

Four steps. Quoted in writing.

Every tier includes the whole platform. What changes with size is the price per user, the setup scope and the service level.

Step 01

Paid proof of value

Thirty days in your own browser estate, up to 100 users, on your sector's template. Credited in full against year one.

Step 02

Tier by headcount

Starter for 100 to 249 protected users, Growth for 250 to 999, Enterprise from 1,000.

Step 03

One-time setup

Rollout through your MDM, policy tuning to your data, and the works-council documentation.

Step 04

Annual contract

Per protected user, billed annually. Monthly billing is available with a surcharge.

See the tiers

Questions

What we are asked.

Does this replace our SSE or DLP?

No. It covers the interaction those controls cannot see: the prompt and the upload inside the page. It complements your network, identity and endpoint stack.

What is the operational risk?

The extension runs in user mode inside the browser sandbox, with no kernel components. It fails open, so a fault cannot take the AI tools down.

Get started

See it stop real-looking data in a real browser.

A 30-minute technical walkthrough: a prompt redacted, a file stopped, the dashboard, and an evidence pack verified offline in front of you.

No slide deck. Synthetic data only.

The VU Amsterdam campus in the Zuidas at blue hour, lit windows reflected in a wet plaza with bicycles parked out front.
Where we are

Built in Amsterdam, at VU StartHub.

Deltawall works from VU StartHub, the startup hub of Vrije Universiteit Amsterdam, on campus in the Zuidas. Meet the team for a demo in person.

VU StartHub, NU Building
De Boelelaan 1111
1081 HV Amsterdam, the Netherlands