CIBEC 2023 PhD Thesis scientific foundation: Govern the conversation, not the channel Explore research →
REAL-TIME CONVERSATIONAL GOVERNANCE & ACTIVE FLIGHT CONTROL

Your client chooses the channel.
Your enterprise governs the conversation.

Deploy generative AI and high-stakes operations across WhatsApp, Teams, and Telegram without regulatory penalties or PII leaks. Active in-flight governance before message dispatch — without ceding data control*.

Explore Architecture
CERTIFIED CLOUD & MESSAGING PARTNERSHIPS
Meta Solution Partner Official Meta Solution Partner
AWS Partner Network Certified Cloud Sovereignty
Google Cloud Partner Certified Infrastructure
ENS Categoría Media RD 311/2022 · Cátedra CBC-UV
+40M
Mission-critical interactions governed in real time
<3ms
Active origin intervention latency
100%
Forensic audit trail & evidentiary non-repudiation
48h
Time-to-production in sovereign cloud or private VPC
THE UNCOMFORTABLE TRUTH

Your clients transact on WhatsApp.
Your organization cannot afford to operate blind.

Shadow messaging is not employee rebellion: it is the inevitable market reaction to clunky portals. Your business requires the agility of WhatsApp; your DPO strictly forbids exposing unmasked PII; your Compliance committee requires forensically auditable proof. Today, you are losing all three.

FALSE EXIT 01 · PROHIBITION

Banning the channel

Telling staff «WhatsApp is strictly prohibited» does not stop conversations — it hides them from the CISO. It drives massive Shadow IT, strips evidentiary protection, and leaves the company legally indefensible.

✗ Uncontrolled leaks guaranteed
FALSE EXIT 02 · TRADITIONAL DCGA

Archiving after message delivery

Capturing a passive audit copy hours after the message landed on the recipient's personal handset prevents nothing. It merely documents the GDPR breach or non-compliance sanction for the regulator.

✗ Zero prevention: only logs the regulatory fine
FALSE EXIT 03 · DISCONNECTED BOTS

Rigid FAQ deflection bots

Imposing brittle chatbots that cannot execute real transactions frustrates clients. Sales reps and relationship managers quickly bypass them to use personal unmonitored WhatsApp numbers.

✗ Destroys adoption and scatters sensitive data
THE NEW CATEGORY

The channel is replaceable.
The conversation is your asset.

VALNATIR decouples corporate governance from the underlying messaging transport. It operates as a universal control plane that guarantees compliance, immutability, and protection without ceding data control*.

PILLAR 01 / DECOUPLING

Full Channel Independence

WhatsApp, Telegram, Teams, or SMS are merely transport pipes. Context, verified identity, and relationship metadata belong exclusively to your organization.

PILLAR 02 / IN-FLIGHT

Active Origin Governance

Semantic inspection, DLP rules, and PII anonymization execute in under 3ms BEFORE the message is delivered to the recipient or processed by any external AI model.

PILLAR 03 / CUSTODY

Evidentiary Chain & Non-Repudiation

Cryptographic timestamping and immutable hashes with customer-managed keys (BYOK). Complete forensic validity before audits, litigation, and regulatory inquiries.

INTERVENTION ARCHITECTURE

Flight Control vs. Black Box:
How VALNATIR governs every single message

Once a sensitive message lands on a client's handset, damage control is impossible. VALNATIR operates at origin, prior to delivery.

IN-FLIGHT ACTIVE INTERVENTION PIPELINE · MEASURED LATENCY: 2.8ms
✓ ACTIVE PRE-DISPATCH GOVERNANCE
01 Client Channel WhatsApp / Teams 02 VALNATIR Gateway In-Flight < 3ms Policy Validation 03 DLP & PII Vault Pre-LLM Masking* 04 Core & Inference Ephemeral / CRM
01 · INTAKE
Coexistence on Number
Employees use their everyday WhatsApp. Zero new mobile app installation. Zero adoption friction.
02 · GOVERNANCE IN-FLIGHT
DLP & PII Anonymization <3ms
Pre-dispatch evaluation. Sensitive PII tokenization and compliance rules evaluated before release.
03 · ROUTING
Scoped Ephemeral Rooms
Sensitive transactions escalate to an encrypted ephemeral room. Standard queries dispatch smoothly.
04 · CUSTODY
Corporate Custody
Immutable log in enterprise records with customer-held cryptographic keys (BYOK).
Risk deactivated at origin: Breaches and unauthorized exposures never materialize.
01 · ORIGIN
Unchecked Send
The employee sends contracts or confidential data without any preventative filter at origin.
02 · DELIVERY
Recipient Handset
The message is already on the recipient's phone. The GDPR breach or leak is irreversible.
03 · ARCHIVING
Passive Server Backup
A passive connector stores a static copy hours later in an audit silo.
04 · PENALTY
Regulatory Fine
Legal and CISO discover the leak months later when served with a regulatory enforcement action.
Ineffective against damage: Legacy DCGA fails to prevent leaks; it only documents fines.

Deployment Models

VALNATIR Sovereign Cloud

Multi-organization deployment with strict cryptographic tenant isolation on sovereign European infrastructure. Active in 48 hours.

Instant · 48h

VALNATIR Dedicated / PaaS

Dedicated instance hosted inside your organization's private VPC (AWS, Azure, GCP). Bring Your Own Key (BYOK) root of trust.

VPC · BYOK

Mission-Critical Deployment

Engineered for government agencies, defense bodies, and critical national infrastructure requiring ENS Media segregation.

ENS Media · Air-Gapped
VERIFIED ECOSYSTEM CREDENTIALS & CLIENTS

Organizations and Brands Powered by the Infrastructure

ENTERPRISE
Standard Chartered
Tier-1 Global Banking
ENTERPRISE
McDonald's HK
Conversational Retail Ordering
ENTERPRISE
HSBC Partner
Business Go Ecosystem
ENTERPRISE
Toyota & Lexus
Automotive & Financing
ENTERPRISE
IWC Schaffhausen
Swiss Luxury Horology
ENTERPRISE
PlayStation HK
Digital Commerce & Gaming
GOVTECH
INCIBE
National Cybersecurity Institute
GOVTECH
Dip. de Guadalajara
Provincial Government
GOVTECH
Ajuntament d'Elx
24/7 Citizen Attention
GOVTECH
Ajuntament de Castelló
Municipal Citizen Services
GOVTECH
Ayto. Torre Pacheco
Citizen Desk on WhatsApp
GOVTECH
Tierras Altas
Formal Public Award 131,600 €
SECTORIAL GOVERNANCE · THREE SPECIALIZED VERTICALS

Engineered for the exact regulatory frictions
of your operational sector.

Every regulated vertical faces unique compliance hurdles and operational liabilities. VALNATIR deploys dedicated, audited flight control that turns everyday messaging channels into mission-critical systems with complete legal and architectural certainty.

01 · CORPORATE DORA · SOLVENCY II · ART. 9

Enterprise & Regulated Markets

Unlock high-value transactions, contracts, and customer servicing in banking, insurance, healthcare, and retail without exposing customer PII to LLMs.

  • Coexistence on the Number: Customers and employees use everyday WhatsApp with zero app installation.
  • Pre-LLM Masking <3ms: Tokenization of PII in-flight with keys held under customer custody (BYOK).
  • Automated Resolution: 75% to 80% of routine account contacts resolved with complete auditability.
✓ 0 PII breaches across +50,000 banking transactions & appraisals
02 · PUBLIC SECTOR ENS MEDIA (RD 311/2022)

GovTech & Public Administration

Citizen services, administrative records inquiries, tax reminders, and one-stop desks on WhatsApp without digital divide friction or app downloads.

  • Zero Certificate Barrier: Universal digital inclusion for elderly citizens and unbanked populations.
  • Administrative File Sync: Direct traceable link into public registries and municipal back-offices.
  • ENS Media Guarantee: Isolated audit logs and sovereign European cloud infrastructure.
✓ Proven municipal & state traction (INCIBE, Guadalajara, Elche, Tierras Altas)
03 · TACTICAL EPHEMERAL ROOM · CHAIN OF CUSTODY

Defense & Public Safety

Bounded tactical rooms, instant field witness reports, forensic chain of custody, and protected victim channels with zero residual trace on handsets.

  • Ephemeral Scoped Rooms: Dynamic provisioning on incident with cryptographic shredding on debrief.
  • Zero Terminal Trace: Remote purging of media and chat caches on victim or field agent devices.
  • Judicial Standing: RFC 3161 timestamps and non-repudiation hashes ready for courtroom submission.
✓ Tested protocols for VioGén, Law Enforcement & Incident Dispatch
LIVE PRODUCTION WORKFLOW DEMOS

Messaging is no longer for chatting.
It is for executing operations.

BANKING · WEALTH MANAGEMENT

Credit approvals and trade authorizations without exposing financial PII

Private bankers interact with high-net-worth clients via WhatsApp. VALNATIR intercepts every order, tokenizes account numbers, and creates immutable non-repudiation hashes before dispatch.

✓ 0 breaches across +50,000 transaction orders
INSURANCE · CLAIMS ADJUSTMENT

Instant FNOL claims filing with forensically stamped photos in chat

Policyholders submit incident photos via WhatsApp. VALNATIR authenticates metadata, geolocation, and immutable timestamps directly into the core insurance platform.

✓ Claim resolution shortened from 6 days to 4 hours
HEALTHCARE · CLINICS & HOSPITALS

Confidential triage and lab delivery under strict HIPAA/GDPR shielding

Doctor-patient communication with automated stripping of special-category health data (GDPR Art. 9) before escalating to an encrypted ephemeral room.

✓ 100% compliance with special category medical data
RETAIL · HIGH-TICKET CONSULTATIVE SALES

In-chat contract sign-off and PCI-DSS compliant checkout

Consultative AI sales workflows with built-in conversational payment gateways. Zero external browser redirects, retaining frictionless conversational conversion.

✓ +38% conversion increase over web forms
GOVTECH · PUBLIC SECTOR & CITIZEN SERVICES

Citizen registry requests and official certificate issuance

Public administration citizen services through messaging with reinforced digital identity, conforming to the National Security Framework (ENS Media).

✓ Fully compliant with ENS Categoría Media
DEFENSE · PUBLIC SAFETY & INCIDENT MANAGEMENT

Tactical field coordination with verified remote crypto-shredding

Emergency response channels operating on commercial infrastructure with BYOK key management and verified cryptographic room expiration.

✓ Strict tenant segregation with customer-owned keys
SECURITY & COMPLIANCE (CISO · DPO · COMPLIANCE)

Commercial velocity for the business.
Zero-trust architecture approved by the CISO.

Business units demand instant conversion; security and compliance require unbreachable boundaries. VALNATIR eliminates the compromise by enforcing a dual-perimeter cryptographic barrier.

SECURITY ARCHITECTURE · DUAL PERIMETER ISOLATION
✓ CONFORMS TO ENS MEDIA & DORA
UNTRUSTED PERIMETER Public Messaging • WhatsApp / Telegram • BYOD & personal employee handsets ✗ PII exposure / Shadow IT VALNATIR GOVERNANCE LAYER Cryptographic Isolation ✓ DLP & PII Anonymization (<3ms) ✓ Customer BYOK encryption keys ✓ Non-repudiation cryptographic hashes Strict logical tenant segregation HARDENED PERIMETER Enterprise Core • Core Banking / CRM / ERP • Enterprise LLM Inference ✓ 100% anonymized inputs*
01
Pre-Inference PII Anonymization (*)

The external language model never sees raw national IDs, IBANs, card numbers, or medical records. In-memory tokenization runs before prompt dispatch.

02
Dual Coexistence without Intrusive MDM

Commercial agents use their existing WhatsApp without invasive MDM device profiles that infringe employee privacy on personal phones.

03
Tenant Isolation & BYOK Key Custody

Each enterprise is hosted within a cryptographically isolated tenant. Decryption keys remain stored inside your HSM (Bring Your Own Key).

04
Conforming to ENS Media (RD 311/2022) & DORA

Engineered to satisfy Digital Operational Resilience (DORA - EU 2022/2554) audits and public administration data sovereignty criteria.

valnatir-pii-engine · v2.3.1
$ pii-gate inspect --stream=wa-gw-01
[14:02:41.102] HOOK Intercepting inbound packet (WhatsApp)
[14:02:41.103] DETECT National_ID: 48****21B · IBAN: ES91****4012 intercepted
[14:02:41.104] DLP Reversible anonymization applied → Tokens: [PII_ID_01], [PII_IBAN_01]
[14:02:41.105] LLM_GATE Sanitized payload dispatched to Claude 3.5 Sonnet
[14:02:41.106] SEAL Non-repudiation SHA-256 hash sealed in Cryptographic Vault
[14:02:41.107] STATUS Transaction completed in 2.8ms
* No PII exposed. Data anonymized prior to reaching the model. Encryption keys and custody remain under your organization's control.
UNHINDERED ADOPTION

Enterprise governance accessible for any organization

We break the monopoly of inaccessible DCGA platforms. You do not need a Wall Street investment banking budget to operate with technical rigor.

Early Adopters

Starter Workflow

For agile teams looking to unlock their first mission-critical WhatsApp workflow with complete compliance guarantees.

48h Pilot
  • Coexistence on existing corporate numbers
  • In-flight origin intervention (< 3ms)
  • Proprietary conversational model
  • Direct engineering-tier technical support
Mission Critical

Dedicated / On-Prem

For defense bodies, emergency services, and regulated utilities requiring absolute key sovereignty.

Custom
  • Private VPC deployment or self-hosted PaaS
  • Full cryptographic key custody (BYOK in HSM)
  • 24/7 mission-critical response engineering
  • Custom SLA and forensic audit guarantees
SCIENTIFIC & ACADEMIC BACKING

Cátedra de Negocio Conversacional (CBC-UV)

VALNATIR is not built on fleeting marketing trends. It stems from the methodological rigor of the CIBEC 2023 PhD Thesis and ongoing research at the University of Valencia.

«Organizations are already conducting critical conversations over consumer messaging channels, executing transactions through them, and running core business processes within them, with or without permission. If the conversation sustaining these three things travels over a messaging channel, that channel is a mission-critical system, not a marketing channel.»
— D. José Pérez, Director of the Conversational Business Academic Chair (CBC-UV) · CIBEC 2023 Congress
Review Research & Academic Papers →
IMMEDIATE IMPACT

Start with one workflow.
The one your DPO and Compliance committee have spent months blocking.

You don't need to rebuild your IT stack tomorrow. We spin up a controlled, forensically audited pilot environment for your most sensitive workflow in under 48 hours.

Speak with an Architect