One subscription.
Everyone covered.
Coverage is priced per person for the whole organization. The number comes on the first call.
One subscription covers the whole organization. Your number depends on headcount, and you will have it by the end of the first call, before any commitment.
How the pricing behaves.
Three decisions behind the number, all of them made so it stops being a reason to ration the program.
Coverage is per person and covers the whole organization, because equal coverage means nobody is singled out.
The record, the reviews, the examiners and the portal are all in it. There are no modules to choose and no tiers to climb.
Every departure gets its exit review, and investigations are included within an annual allowance, set with your number on the first call and scaled to your headcount.
Four ways to handle insider risk.
A DLP or insider-risk tool needs a team you may not have. A forensics firm is usually engaged once a matter arises, one matter at a time. Building it yourself takes a standing headcount. We run the program continuously and hand you conclusions.
| Capability | Excavate | DLP tool | Forensics firm | In-house |
|---|---|---|---|---|
| Works continuously, before anything goes wrong | Yes | Yes | No | Yes |
| Warns you when activity looks risky | Yes | Yes | No | Partly |
| Every trigger worked to a written close | Yes | No | No | Partly |
| No team to hire, train or keep | Yes | No | Yes | No |
| Conclusions, not alerts to triage | Yes | No | Yes | Partly |
| Forensic depth and chain of custody | Yes | No | Yes | Partly |
| Evidence preserved before you need it | Yes | Partly | Partly | Partly |
| Every departure reviewed | Yes | No | Partly | Partly |
| Examiners outside your reporting lines | Yes | No | Yes | No |
The hard questions,
answered plainly.
The ones that come up on every first call, including the one everybody asks second.
“So you are monitoring us?”+
Coverage reads work activity in the systems you already run. Our rules turn it into triggers that our AI agent and examiners work, so your team is not left triaging alerts, and when something needs you, we tell you what we found. Everyone is covered equally, so no one is singled out and nobody is scored or ranked. Every review is logged, cleared ones included, and visible to your authorized team, whose own access is logged too. A review your team requests is logged with its stated purpose.
What happens when a trigger fires?+
Our AI agent and our examiners work it together against the whole record: what fired, what was checked, and how it closed, all written to your record where you can audit it. The agent prepares each review and recommends. Only an examiner can escalate a review or conclude anything against a person.
Who can see the data?+
Your authorized team, through the portal, with every access logged. Our examiners see what a trigger or a review needs, and their access is logged too. Your record is isolated from every other client. Our AI runs on the OpenAI and Anthropic APIs, listed on the trust page as subprocessors, and your data never trains a model.
Do we need to install agents?+
No. Coverage reads Microsoft 365, Entra ID, GitHub, your HR system and your other sources through read-only APIs. Device evidence, such as USB writes and recovered deleted files, comes from the laptop itself: on a case, your IT runs our collection tool on it (Windows, macOS or Linux), the way a forensics team would, and uploads the result to the portal.
How is this different from insider risk tools?+
Tools sell you a queue. You staff it, tune it and keep up with it. We run the pipeline, work every trigger with our AI agent and examiners, and bring you conclusions with the evidence behind them, each signed by an experienced forensic examiner. You get the record and the conclusions without hiring a team to produce them.
What happens when someone resigns?+
The resignation is itself a trigger. Every departure gets an exit review of the preserved record during the offboarding process: files, shares, sign-ins, repositories. We ask IT to hold the laptop until the review closes. Included for every departure, and concluded in writing.
We operate in the EU. How does this work there?+
Proportionality is your assessment to make, and we support it and your DPIA. Everyone is covered equally, the same rules apply to everyone, access is purpose-bound and logged, and every conclusion carries its cause. Your counsel and works council get the documentation in plain language. EU hosting is available on request.
Which AI do you use, and does it train on our data?+
Our AI agent runs on OpenAI and Anthropic models through their APIs. Neither trains on data sent through the API, and neither do we. The agent prepares each review and recommends; only an examiner can escalate a review or conclude anything against a person.
How far back does the record go?+
We backfill whatever history each source still keeps, so the record does not start empty on the day you connect. From then on nothing expires: it stays in your record until you choose to delete it.
Can you see personal AI accounts?+
Not through any API. The company AI accounts you connect, such as ChatGPT Enterprise, Claude, Copilot and Gemini, are on the record through their APIs. Personal accounts show up when the laptop is collected on a case.
What does it cost?+
A per-person subscription for the whole organization. The number depends on headcount, and we share it on the first call, before any commitment.
Get your number on the first call.
Thirty minutes, the systems you run, and a straight answer on whether coverage fits.