DataFab / Utilities / National security
Governed utility · defence, intelligence & national security
Every source. Every warning. Nothing leaves.
The hardest failures in this mission are not failures of collection. The signal is usually already there, in fragments, across disciplines, discounted at a single desk. DataFab draws every source you already hold into one governed picture, tests it continuously against the threats you are watching for, and forces what matters into a warning that cannot quietly disappear — entirely inside your enclave.
“A signal in one discipline, a face in imagery, a shell company in financial data, a handle in social media. Each true, none complete. Assembled by hand, under time pressure, and the adversary lives in the seams.”
Every serious all-source capability on the market asks for the data to come to it. For this mission that is the end of the conversation — which is why the tools that could help are the tools that cannot be used, and the picture keeps being assembled in charts and spreadsheets that are stale the moment they are finished.
DataFab does the opposite. It reads your sources in place and resolves on the way back, so a single connected picture forms without a single record leaving its system, its domain or your boundary. Each discipline stays under its own controls; what is shared is the resolved picture, permission-aware, not the raw collection.
Table stakes, and the difference
Everything an analyst expects — then the part that matters.
Every capability an all-source analyst reaches for is present and native from day one. That is the floor. It is not the reason to choose this.
The floor — assumed, native, present on day one
Nothing leaves
The picture is real; the data movement is zero. Every source read in place and resolved inside your enclave — the one all-source capability you can actually run on classified ground. Designed in, not bolted on.
The warning that cannot be buried
Weak signals are scored continuously across the entire estate and accumulate into an institutional warning that resurfaces on new evidence. It cannot die inside one analyst’s judgement, a silo, or a prevailing assumption.
A virtual team, commanded by dialogue
One analyst directs a governed team of specialists that carries out an enormous amount of complex work — in conversation, not queries. The reach of a unit, from a single seat.
All-source collection
Every discipline. One governed picture.
Each discipline is a governed collection agency — tasked against the requirement, read in place, and resolved into the same graph. Stovepipes end without a lake: nothing is duplicated into a new store, and only metadata, statistics and resolved mappings live in the fabric.
A name is not an identity
Variants, aliases and transliterations merge into one golden record — reversible, provenanced and scored. Uncertain matches go to an analyst, not a guess.
Any script, one entity
Arabic, Cyrillic, Han and Latin renderings resolve to one party, matched phonetically and semantically rather than by spelling, at the ontology level.
Same name, different person
Held apart by biography, relationships, geography, time and source. A match that merges two people is worse than no match at all.
The picture compounds
Every validated judgement enriches the knowledge state — corporate memory the mission keeps when the analyst rotates out.
Collection, fused
Stovepipes end — without a lake.
Each discipline stops being a separate stovepipe and becomes one corroborated picture, every fact traced to its origin. The connected picture forms without a single record leaving its system, its domain, or your boundary.
Resolution & disambiguation
One identity across scripts — and never two people merged.
Both problems are solved at the ontology level, with provenance and a confidence score on every decision, and the network behind each entity surfaced so the hidden hierarchy becomes visible.
Institutional de-biasing
From analyst judgement to institutional warning.
An analyst defines a future threat hypothesis. The system decomposes it into observable indicators, tests the entire internal and external estate against it continuously, accumulates corroborating evidence across disciplines, preserves the contradictions, maintains the hypothesis over time, and escalates it into a warning that cannot simply disappear because an individual discounts it.
A warning should not disappear because one person does not believe it.
The system does not remove human judgement — it removes the ability for important evidence to disappear inside itTraditionally
One analyst, once, ending in a single decision.
- The hypothesis is assessed at a point in time
- Confidence is fixed at that assessment
- Contradicting evidence is discarded or footnoted
- Belief or disbelief closes the question
- New signal has to find the same analyst again
Persistent
The hypothesis keeps being tested.
- Every relevant new piece of intelligence is tested against it automatically
- Confidence moves as evidence arrives, up or down
- Contradictions are preserved beside corroboration
- At the threshold it becomes an agency-level object someone must disposition
- New signal resurfaces it, and a more senior person dispositions it again
Horizon scanning
See the threat before it is a threat.
Most tools react to known threats. A researcher defines a new scenario, risk or typology and reverse-engineers it into the smaller, observable indicators that would signal it — and the system then watches for them across every source, measuring every new piece of data and every new ontology concept against every live scenario.
Each indicator is answered with policy before a byte is collected: which source holds it, its credibility, the authorisation required to task it, its format and frequency, and whether the data is already within reach. Governed from the first hypothesis.
Hypothesise
The researcher initiates — the novel threat concept and its composable components. The initiator of the dialogue, not a passive reader of alerts.
Reverse-engineer
The concept is broken into the observable sub-events and indicators that would realise it.
Answer with policy
Each indicator is met with a source, a credibility, an authorisation, a format and a frequency — and whether it is already within reach.
Watch
Every new piece of data and every new ontology concept is measured against every live scenario, across the whole estate.
Extend the ontology
New scenarios, sources, concepts and typologies fold back into the semantic layer — the system grows its own scope.
Ranked by relevance
Emerging signals are scored and ranked, so the analyst sees what matters first rather than everything at once.
Time, place, media
Temporal, geospatial and full-motion-video evidence resolved onto the same entity, pinned beside the finding.
Notified in time
The alert routes to the right analyst with the case already assembled — indications and warning, not hindsight.
Casework & requests for information
From requirement to finding, governed end to end.
The investigation runs inside the platform, not around it. An analyst frames the gap and raises a request; it is deconflicted and cleared at the right authority tier, then routed by information type to the provider that holds it; results are fused on common entities with a confidence score and a human decision on every merge.
A worked case
Three reports, three disciplines, three jurisdictions. What is the link?
A virtual team for every analyst
One analyst. The reach of a unit.
A collector tasks every source. A resolver builds one entity per record. A corroborator cross-checks the claim. A researcher runs down every lead. A monitor watches, continuously. A drafter assembles the product. The analyst sets the intent and holds the judgement — the team does the legwork, in parallel, at scale.
The scarce resource in this mission is the analyst’s judgement, not their hours. The platform spends the hours so the analyst spends their judgement. Every agent inherits their clearance and acts only on what they may see; consequential actions wait on their authority, and the gate is logged.
Map everyone linked to vessel MV Orwell across the last 90 days.
DataFabResolving across signals, port registries and open sources — 47 entities, 6 relationships. 3 uncertain matches flagged for your review. The imagery pull needs your authorisation before I task it.
YouApprove the imagery. Prioritise the financial links.
DataFabImagery tasked and logged to you. Two front companies share a beneficial owner at confidence 0.91. Building the network now, and I will watch for new movement while you read.
YouDoes this touch anything live?
DataFabOne entity appears in a case held by another team. I cannot show you their material at your clearance; I have raised a deconfliction notice to both desks with the shared entity named and nothing else. need-to-know enforced at the graph · the refusal is recorded
Illustrative dialogue showing the utility’s behaviour. Figures are example values, not measured results.
Governance & oversight
Accountable by construction.
Governance here is not a policy document. Classification, need-to-know, human authority and a complete record are enforced at the graph itself, on every read and every action, for every person and every agency. Because it is a property of the graph rather than a layer on top, the answer to who did what, why, and whether they were allowed to is always available.
Classification-aware
Every record, edge and product carries its marking. Handling and release rules are enforced, not advisory.
Need-to-know
Each user and agent traverses only the slice it is cleared for. One fabric never means one undivided view.
Compartmentation
Ethical walls and compartments enforced across the connected environment — a shared picture that respects every barrier.
Human authority
Consequential decisions gated to an accountable person. Agents prepare; people decide; the gate is logged.
Explainable
No black box. Every answer grounded, cited to source and reconstructable — the reasoning is inspectable.
Tamper-evident
Who saw what, who decided, on what evidence, and when — a complete, immutable record.
Full lineage
Every fact traced from source to judgement; every merge reversible and provenanced.
Oversight-ready
The defensible record is produced as the work happens — ready for an inspector, a court or an oversight body.
Deployment
Deploy it where the mission is.
The same governed platform against your infrastructure, your classification and your operating model — with zero egress preserved everywhere, including forward.
Air-gapped
Full functionality inside an isolated network; agent-based and outbound-only where a boundary is crossed at all.
On-premises
Inside your data centre, reading in place to the systems you already run.
Sovereign cloud
Your accredited environment, your keys, your jurisdiction. No vendor tenancy, no third-party custody.
Cross-domain
Classification-aware across domains; nothing crosses a boundary without authority.
Tactical
Deployable forward and disconnected — the picture travels, and the guarantees travel with it.
Next step
Faster decisions. Fewer blind spots. A record that survives oversight.
One governed picture of everything you already hold — every discipline resolved in place, operated by your people and governed agencies, and never moved beyond your boundary.