◇
Verify before processing.
We apply server-side checks to reduce automated submissions, repeated requests and malicious form activity before routing a communication.
ALPASCAPE / COMMUNICATIONS GOVERNANCE POLICY 02 / 2026
EXANIA INTELLIGENCE × CYBERSECURITY OPERATIONS
Every message.
Under considered control.
Cybersecurity begins before a conversation reaches a specialist. We structure inbound communications to verify the request, understand its purpose, recognise risk signals and direct it to an accountable team.
A communications framework informed by Exania AI research, reinforced by Alpascape security controls and governed by human judgement.
✓ Protected intake✓ Accountable routing✓ Human review
EXANIA × ALPASCAPE ARCHITECTURE / MODEL
PROTECTED COMMUNICATION FRAMEWORKSECURITY + INTELLIGENCE
01 / OUR CONVICTIONA message is never
A message is never
just a message.
Requests can contain genuine business opportunities, incident reports, sensitive information and attempts to abuse a communications channel. A security organisation must treat each with appropriate care.
Our governance commitments ↗◈
Understand the intent.
Categories and information supplied by the sender help distinguish an audit enquiry, operational incident, investigation or general business request.
⌘
Escalate with purpose.
High-risk or sensitive requests require the right level of scrutiny, controlled disclosure and qualified human decision-making.
◎
Keep humans responsible.
Automated checks and future AI-assisted analysis support our teams. They do not independently authorise security operations or determine final outcomes.
02 / EXANIA × ALPASCAPEFrom incoming signal
From incoming signal
to informed response.
Five control points form the architecture of disciplined communication handling. Explore each stage to understand where security, intelligence and human judgement fit.
INTERACTIVE ARCHITECTURE / ILLUSTRATIVECOMMUNICATION CONTROL PLANESTAGE 01 / 05
ACTIVE FORM CONTROL
Every request begins with a controlled entry point.
Our website contact flow collects a selected category, contact information and the minimum useful context, then processes the submission using a protected server endpoint.
CONTROL PURPOSEStructured intake / reduced exposure
Architecture visualisation. This panel is not a live message monitor or a record of anyone’s submission.
03 / THE EXANIA ADVANTAGESecurity intelligence
Security intelligence
built around context.
Exania develops specialised AI research and engineering within Exohood Labs. Alpascape’s communications architecture is designed to incorporate that intelligence where it can improve threat-aware classification, case prioritisation and the preparation of relevant responses.
Model-assisted capabilities require their own secure deployment, validation and access controls. The currently deployed website intake primarily uses verified form selections and rules-based routing.
Explore Exania AI ↗LANGUAGE & INTENTTHREAT SIGNALSCASE CLASSIFICATIONRESPONSE SUPPORT
Four areas of applied intelligence considered in the communication-processing architecture.
04 / INTELLIGENCE IN PRACTICEDifferent signals.
Different signals.
Different decisions.
Explore how a properly configured classification layer could distinguish business enquiries, suspicious content and high-priority incidents before human review.
SAMPLE SCENARIOS — NOT LIVE PROCESSINGSELECT A SAMPLE COMMUNICATION
Synthetic examples. No message is transmitted or analysed by a live AI model in this demonstration.
EXANIA / TRIAGE BLUEPRINTILLUSTRATIVE ANALYSIS
CONTEXTBlockchain / Smart contracts
ROUTINGBlockchain assurance
RECOMMENDED REVIEWTechnical scoping
A designated specialist would confirm the scope, ownership and authorisation before work begins.
NO AUTONOMOUS APPROVALHUMAN DECISION REQUIRED ✓
05 / PROTECTED BY DESIGNTrust starts
Trust starts
at the perimeter.
Our website contact controls are designed to limit abuse before a message reaches the appropriate team. This is a practical security boundary, not an assertion that every attack can be prevented.
Controlled communications intake.
Form validation, session-bound verification, anti-bot measures and a per-IP submission restriction reduce automated or repetitive requests.
Encrypted in transit.
Website enquiries are submitted using HTTPS/TLS. This secures the connection in transit; it is not a claim of end-to-end encryption across all downstream systems.
Verification before delivery.
A mathematical challenge, CSRF validation and an additional hidden-field check help identify unwanted automated form activity.
One accepted request per IP.
An accepted submission is recorded against the originating IP for repeat-submission control. People on shared networks may be affected by this limit.
Protect sensitive evidence.
Do not upload credentials, private keys, wallet recovery phrases, exploit payloads or classified records through the standard contact form. Agree on a secure transfer method first.
IMPORTANT / OPERATIONAL SCOPE
Countries are selected by the sender from our supported European list; the website does not independently verify the country against IP geolocation or detect VPN usage. AI-assisted content inspection is not implied merely by the presence of a visual workflow.
06 / PRIVACY & HUMAN GOVERNANCEInformation deserves
Information deserves
disciplined handling.
Communication intelligence must operate within clear boundaries: defined purpose, appropriate access, controlled retention and meaningful oversight.
What we collect
Details provided through the form, such as name, email address, organisation, selected enquiry type, declared country, message and priority. The originating IP address and session security data are also processed to protect the endpoint.
Why we process it
To verify and respond to enquiries, reduce spam and misuse, establish a relevant contact point, assess service requests and fulfil applicable legal or security obligations. The applicable lawful basis depends on the request and jurisdiction.
Access & service providers
Authorised personnel and contracted communications processors may handle information needed to deliver and review a request. We apply access and confidentiality requirements appropriate to the service and disclose providers or transfers as required by law.
Exania AI & automated assistance
Where a model-assisted workflow is specifically enabled, relevant content may be analysed for context, routing, risk signals or draft-response support. This requires purpose limits, access controls, testing and human oversight. Current website routing is primarily rules-based.
Retention & requests
Communication records, security event records and anti-abuse data may have different retention needs. We seek to retain information only as necessary for legitimate purposes and applicable obligations. Data rights and requests are handled under our Privacy Policy.
Response authority
No visual classification, automated label or proposed answer constitutes a security assessment, legal opinion or acceptance of an engagement. Responsible staff determine scope, approvals, escalation and substantive replies.
OUR OPERATING RULEAI may assist the analysis.
People remain accountable for the answer.Read the Privacy Policy ↗
People remain accountable for the answer.Read the Privacy Policy ↗
07 / TRANSPARENCYImportant questions.
Important questions.
Precise answers.
We prefer accuracy to exaggerated assurances. These questions clarify what our intake does and how model-assisted communications are governed.
Does Exania AI analyse every message I submit?
Not necessarily. Our current website contact system validates submissions and categorises them using selected form fields and server-side rules. Exania AI research informs a broader architecture for model-assisted classification, suspicious-pattern screening and response support, but these functions require separate activation and governance. We do not claim that every submitted message is already processed by an AI model.
Does your system monitor threats or scan email content?
Security monitoring capabilities depend on the communications channel and the services actually enabled. The website form enforces anti-abuse and verification controls. Additional content-based threat analysis, including AI-assisted screening, is a distinct capability that must be integrated, assessed and authorised before use.
Can an automated system answer or approve a request?
Automation may help organise information or prepare a response draft where implemented. It cannot, by itself, grant permission for penetration testing, approve sensitive disclosures, provide a binding legal opinion or replace the human review needed for consequential decisions.
Is the form end-to-end encrypted?
Communications submitted through our website are protected in transit by HTTPS/TLS. That does not mean every subsequent processing system uses end-to-end encryption. Never include passwords, recovery phrases, private keys or classified evidence in the ordinary contact form.
Why is my IP address used?
The originating IP is used for anti-abuse controls. The current contact process limits the number of accepted submissions per IP. Shared networks may encounter the same restriction. The site does not use an IP geolocation licence to establish your real location or whether you use a VPN.
Are my messages automatically used to train Exania models?
This policy does not establish automatic training on contact messages. Any separate use of message data for model development would require an appropriate purpose, lawful basis and safeguards. Model-assisted triage and model training are different forms of processing.
What should I do if I have an active security incident?
Use the incident category to submit a high-level description and request appropriate coordination. The public contact form is not a guaranteed 24/7 emergency-response channel. Do not include confidential forensic evidence until a suitable secure channel has been arranged.
08 / START WITH SECURITYThe next conversation
The next conversation
starts with trust.
Tell us what you need. We will establish the right context, channel and responsible point of contact.