The vault record
This morning
Xero
Opened to read invoices · 07:00
Your AI key
Opened for the brief · 06:59
Google
Opened to read the diary · 06:58
Octopus Energy
Opened to read prices · 06:30
Shown on any screen
Never
Discretion
Discretion is the first duty of a steward.
Castald holds the keys to your house and your business. It is built so that nobody else holds them: not a platform, not our staff, not the screen in the hall.
I.
Seven undertakings
What your steward will do, and what it never will.
These are rules in the software, not promises in a brochure. Each one is enforced in the code your steward runs on.
-
i.
It asks first.
Money, messages, access and deletion come to you as one plain line before anything happens: what, to whom and for how much. Approve, or not now.
-
ii.
Secrets stay sealed.
Passwords, keys and account tokens are sealed in a vault, each under its own key. The AI never receives one, and no screen or tool can read one back.
-
iii.
Nobody looks without your leave.
Our staff cannot see inside your household. If you want help, you grant access for a set time, read-only, and every look is recorded where you can see it.
-
iv.
Your data keeps its place.
A household’s data is kept in the UK or EU region set for it when it is created, and stays there.
-
v.
There is no password to steal.
You sign in with a passkey held on your own phone or computer. A code by email is the fallback. Nothing to guess, reuse or leak.
-
vi.
A record of everything.
Every action your steward takes, every use of the vault and every look by our staff is written to a record you can read.
-
vii.
Leave whenever you like.
Export everything in one file. Delete the household and receive a certificate that it is gone.
II.
The vault
Sealed, and opened one item at a time.
Each secret is sealed in its own envelope under your household’s key. When a connection needs one, it is opened in memory for that single use, and the use is written down.
The database on its own holds nothing readable. Every opening is added to a chained record that shows at once if anything in it has been altered.
III.
Who sees what
Each person sees their share, and no more.
The owner sets the roles. A child can dim the lights; only an adult can open the door. A business is its own space, and the household never sees its books.
The owner
Everything, and who else is in
Adults
The whole house; they may approve
Children
Lights, music and answers; nothing that asks first
Guests
They may ask; they change nothing
A screen in the hall
Lights and scenes; never money or the inbox
Our staff
Nothing, unless you grant it
Answers only to you.
Not to a platform. Not to an advertiser.
IV.
What the AI sees
The model is told only what one answer needs.
Only what is needed
Each answer is built from the facts it needs, and no more. Secrets never reach the model.
Your own provider
Bring your own key and prompts go only to the provider you chose. Change it whenever you like.
Memory, with its source
Anything your steward remembers is kept with where it learnt it. Read the list and strike out any line. Children’s and guests’ words are never remembered.
Voices, if you wish
Voice recognition stays off until each person enrols. A voiceprint is kept in the vault and never sent to a model.
A steward for the whole estate.
Tell us a little about your house and your business. We will be in touch.