Founded by Practitioners

Built by operators, not analysts.

Two operators learned the same hard lesson on opposite sides of the planet, long before there was a platform to build. One is a Special Forces officer from India, twenty-one years in uniform and a gallantry medal he doesn't lead with, who learned that a vague call gets someone hurt. The other is a counter-terrorism investigator out of Scotland Yard in London, who learned that suspicion is worthless until you can prove it, fast, before the money moves. Different wars, different continents. Same rule: tell the truth fast, with names and numbers, or do not bother. Neither set out to build a SaaS platform. They set out to stop standing in front of a leader who did not have enough to act on. That rule now runs two ways: one through corporate security advisory across Singapore, India, the Philippines and the UAE, and into PhD research on machine intelligence under incomplete information; the other through London and EMEA's tier-1 banks and Lloyd's market firms, telling compliance officers the difference between a real exposure and a theoretical one, because he has chased the real ones himself. Put a Special Forces officer and a counter-terrorism investigator in one room and you get what most platforms cannot fake: ground truth from two fronts, synchronised into one engine, so the next board that asks a hard question already has an answer.

Bengaluru and London, covering the globe between them. Two operators who have made these calls before any client had to ask. One intelligence engine, so your board never decides blind.

Security & Privacy

How Fortius handles the data behind every brief.

Four questions every board asks about an AI platform. Four direct answers. Every practice below is checkable against our privacy policy and terms of service.

01Data

What is stored and for how long.

Three categories. Account information: email, authentication state, and tier. Company context submitted to generate risk outputs: sector, geography, and operational footprint. Platform usage records needed for reliability and support. All held in a Supabase-hosted Postgres database and object storage. None of it is sold to third parties. Retention is governed by business need, active contractual obligations, and applicable law. When an account is closed, associated data is deleted or anonymised.

02AI & Automation

What the system does without a human in the loop.

Brief generation is automated end to end on every tier, including free: live source retrieval, severity and confidence scoring, and consequence-chain construction. On the Scan tier, an analyst reviews and verifies output monthly. On Command, that review runs weekly plus a quarterly board brief. Recon-tier output is not analyst-reviewed. That is a deliberate free-tier distinction, not a gap in the process.

03Access Controls

What one account cannot see of another.

Row-level security policies govern every customer-facing table: one account's data is not queryable by another session, including through the client SDK. Tier and role fields are read-only to the user and writable only by the service role; self-elevation is not possible. Account-level identifiers, email, authentication tokens, and session state, never reach the AI model. The prompt sent to generate a brief contains what you submitted (sector, geography, operational footprint), not who you are as an account holder.

04Contact

Requests and enterprise documentation.

Data subject requests, deletion requests, and enterprise security questionnaires (data processing addenda, subprocessor lists) are handled at privacy@fortiusintel.com. Response time for access and deletion requests is within 30 days. Enterprise accounts may request a completed security questionnaire on written request.

Certification Roadmap: Targets, Not Current Holdings

ISO/IEC 27001:2022SOC 2 Type IIISO/IEC 27701:2025ISO/IEC 27017 & 27018Cyber Essentials PlusCSA STAR

Fortius is building toward formal third-party certification. This page will be updated when each target is completed.

The free scan is the methodology in action: your company, your sector, your geography. Run it and see how the platform frames exposure before you decide whether it belongs in your workflow.

Three free scans. No card. First result under 60 seconds.

Run the Methodology →