# RJV Technologies Ltd ## Pages - [Software and AI systems you can operate, verify and keep](https://rjvtechnologies.com/): RJV Technologies designs, builds and verifies software and AI systems for organisations that need control of their data, operations and infrastructure. - [Find the right route by what you need](https://rjvtechnologies.com/explore): Choose by need: run a system, read the research, commission engineering or understand ownership. Each route leads to published pages. - [Catalogue](https://rjvtechnologies.com/catalogue): Compare products and services. Review capabilities, deployment requirements and commercial terms. - [Products](https://rjvtechnologies.com/catalogue/products): Compare product capabilities, deployment requirements, commercial terms and technical evidence. - [Services](https://rjvtechnologies.com/catalogue/services): Explore services, delivery stages, acceptance criteria and responsibilities. - [Publications](https://rjvtechnologies.com/publications): Research and technical publications from RJV Technologies, each on its own page with its date and status. - [Evidence register](https://rjvtechnologies.com/research/evidence): Recorded findings, verification methods and audit history for RJV Technologies systems. - [Legal records](https://rjvtechnologies.com/legal): The legal records RJV Technologies publishes: company details, customer terms, privacy and the notices that govern use of the platform. - [Pricing](https://rjvtechnologies.com/pricing): How engineering is priced: scope, separate charges, payment milestones and the commercial terms stated in a quotation. - [Complaints](https://rjvtechnologies.com/complaints): How to make a complaint to RJV Technologies, what happens next and the time limits RJV works to. - [API reference](https://rjvtechnologies.com/docs): Explore public API operations, run native requests and inspect response statuses with examples for this deployment. - [AGI](https://rjvtechnologies.com/agi): RJV's intelligence initiative: scientific inquiry, digital agency and the prospect of digital peers. ## Legal record - [Acceptable Use Policy](https://rjvtechnologies.com/acceptable-use): The complete rules for using RJV's site, platform, APIs and AI features — and what happens on breach. - [Accessibility Statement](https://rjvtechnologies.com/accessibility): The WCAG 2.2 AA standard the site is built towards, what is checked today and what is not, and how to report a barrier. - [Complaints](https://rjvtechnologies.com/complaints): How to complain to RJV Technologies, what happens at each step, the timeframes we hold ourselves to, and where you can go next. - [Cookie Policy](https://rjvtechnologies.com/cookies): The session cookie, CSS operating-system appearance and the absence of executable browser scripts or current appearance storage. - [Corporate Information](https://rjvtechnologies.com/corporate-information): RJV Technologies Ltd's registered identity, what the company does, its governance commitments, and where its public records live. - [Customer Ownership](https://rjvtechnologies.com/customer-ownership): What ownership means on an RJV deployment: exactly what transfers, what stays licensed, how the handover is evidenced, and what happens after. - [Data Collection](https://rjvtechnologies.com/data-collection): What data the site and platform collect and how long each category is kept, stated as the platform behaves today — including where no automated deletion runs. - [Data Processing Addendum](https://rjvtechnologies.com/data-processing): The Article 28 terms under which RJV processes customer personal data: instructions, security, sub-processors, transfers, breach handling, deletion and audit. - [Privacy Notice](https://rjvtechnologies.com/privacy): Every category of personal data RJV processes on this site and platform, why, on what legal basis, where it goes, how long we keep it, and your rights — written against the processing register and the deployed inference path. - [Regulatory Transparency](https://rjvtechnologies.com/regulatory-transparency): How RJV determines which regulations apply to what it actually does — and what that determination says today, activity by activity. - [Security & Operational Practices](https://rjvtechnologies.com/security-overview): The security controls RJV actually implements — bcrypt password hashing, TOTP multi-factor authentication, origin and token request checks, hardening, audit logging, checked backups, local AI inference — what is not in place, and what is your responsibility in a deployment you own. - [Security and Responsible Disclosure](https://rjvtechnologies.com/security): How to report a security vulnerability to RJV, the response you can expect, and the safe harbour for good-faith research. - [Sub-processors](https://rjvtechnologies.com/sub-processors): The active sub-processor register, and the verified absence of an external AI model provider. - [Terms of Use](https://rjvtechnologies.com/terms): The terms governing use of rjvtechnologies.com and the RJV platform — what the platform is, what you may do, and what happens when things go wrong. - [Vulnerability Disclosure Policy](https://rjvtechnologies.com/vulnerability-disclosure): The full authorised-scope, rules-of-engagement and response commitments for security research on RJV systems. ## Page - [About the company](https://rjvtechnologies.com/company): Who RJV Technologies Ltd is, what it does, where its legal identity can be checked and how to reach the right part of the company. - [Deployment and ownership](https://rjvtechnologies.com/deployment-and-ownership): What it means to own and operate an RJV deployment: what the customer holds, which outside services are involved and how to leave. - [Industry Editions](https://rjvtechnologies.com/industry-editions): Sector-specific packagings of RJV Technologies platforms, AI, security and compliance. - [Mission](https://rjvtechnologies.com/mission): Why RJV exists: capability with independence, evidence that decides what is accepted as true, and an economy that does not depend on owning intelligence. - [RJV Platform](https://rjvtechnologies.com/platform): The portal connecting accounts, authorised operations, workflows and published information. - [Research programme](https://rjvtechnologies.com/research): The questions RJV investigates, how it investigates them and what has and has not been established. Objectives are kept apart from results. - [Security and assurance](https://rjvtechnologies.com/trust): The security controls RJV has built and tested, what it has not yet done, how to report a vulnerability and what RJV does not claim. - [Work with Us](https://rjvtechnologies.com/contact): How to start a conversation with RJV about an engineering problem, what to include in a first message and what happens next. ## Product - [Audit logging](https://rjvtechnologies.com/audit-logging): Append-only evidence of what happened, who acted and under which authority, verifiable from the record itself. - [Autonomous operations](https://rjvtechnologies.com/autonomous-operations): Definitions, runs and steps executed under a declared budget, with every step attributable to a decision. - [Data infrastructure](https://rjvtechnologies.com/data-infrastructure): Storage, schema and migration discipline for systems that must remain inspectable and recoverable by their owner. - [Document intelligence](https://rjvtechnologies.com/document-intelligence): Extraction, classification and review of documents against an explicit objective, with a record of what was read and what was decided. - [Financial monitoring](https://rjvtechnologies.com/financial-monitoring): Ledger, invoicing and reconciliation over a store that refuses a settlement without its provider reference. - [Governance](https://rjvtechnologies.com/governance): Policy, capability and evidence structures that keep authority explicit as a system changes. - [Healthcare records](https://rjvtechnologies.com/healthcare-records): Records held under the patient's own authority, with erasure and retention honoured as obligations rather than options. - [Identity management](https://rjvtechnologies.com/identity-management): Accounts, credentials, sessions and the authority decisions that govern what each principal may do. - [Industrial production](https://rjvtechnologies.com/industrial-production): Supervision of production systems where the operating boundary and the failure mode are both stated in advance. - [Scientific licensing](https://rjvtechnologies.com/scientific-licensing): Licensing of research and method so that a result can be used without its provenance being surrendered. ## Publication - [Alert rules should be version controlled](https://rjvtechnologies.com/alert-rules-should-be-version-controlled): Alert rules change over time. Thresholds are adjusted. New rules are added. Old rules are disabled. Without version control, you cannot audit what changed, w... - [Automate GDPR data subject access requests](https://rjvtechnologies.com/automate-gdpr-data-subject-access-requests): When a data subject requests their data under GDPR Article 15, you have 30 days to provide a copy of all personal data you hold about them. For most organisa... - [Automated data deletion is not optional](https://rjvtechnologies.com/automated-data-deletion-is-not-optional): GDPR Article 17 gives data subjects the right to erasure. When a deletion request arrives, you must remove their personal data from every system that holds i... - [Back up your secrets before you lose them](https://rjvtechnologies.com/back-up-your-secrets-before-you-lose-them): Secrets management systems store encryption keys, API credentials, and certificates. If the secrets store is lost due to hardware failure, corruption, or acc... - [Cellulose Computing](https://rjvtechnologies.com/cellulose-computing): Cellulose computing proposes a substrate model where computation is bound to a physical medium with verifiable properties. This paper explores the theoretical framework and its application to... - [DNS changes need an audit trail](https://rjvtechnologies.com/dns-changes-need-an-audit-trail): DNS records are managed through a web console with no version control. Changes are made by whoever has access. When a record change causes an outage, the que... - [Detect attackers before they attack](https://rjvtechnologies.com/detect-attackers-before-they-attack): Attackers probe your infrastructure for exposed services. Honeypot deploys decoy endpoints that log every probe, scan, and attack attempt with full audit trail. - [Deterministic Computing Architecture](https://rjvtechnologies.com/deterministic-computing-architecture): Deterministic computing architecture ensures every output is a pure function of its inputs. This paper presents the hash-chain verification method, the content-addressed caching layer, and the... - [Document ingestion for AI search](https://rjvtechnologies.com/document-ingestion-for-ai-search): AI search requires structured document data. You cannot feed a 200-page PDF into a language model and ask questions. The model has a context window limit. Yo... - [Engineering notes: RJV Deploy and the five-phase delivery](https://rjvtechnologies.com/engineering-notes-rjv-deploy-and-the-five-phase-delivery): This article documents the engineering principles that govern the RJV Platform. These are not aspirations. They are rules that every commit, every deployment... - [Industrial Causal Automation](https://rjvtechnologies.com/industrial-causal-automation): Industrial causal automation applies directed acyclic graphs to process control, ensuring every action is traceable to a measured input. This paper presents the graph model and a case study in... - [Our engineering doctrine, in one page](https://rjvtechnologies.com/engineering-doctrine): Audit before acting. Own the whole stack. Make the system legible. A short statement of how we build. - [Post-Probabilistic Security Systems](https://rjvtechnologies.com/post-probabilistic-security): Post-probabilistic security moves from confidence scores to deterministic verification via tamper-evident audit chains. This paper presents the threat model, chain structure, and measured overhead... - [Public proof verification for AI responses](https://rjvtechnologies.com/public-proof-verification-for-ai-responses): AI responses are opaque. When a model generates an answer, there is no way to verify that the response has not been modified, that the same inputs produce th... - [RJV-DD-2026-06-19 r1 — the Determinism Doctrine is published](https://rjvtechnologies.com/rjv-dd-2026-06-19-publish): The RJV Determinism Doctrine (RJV-DD-2026-06-19 r1) is now published. This document defines the engineering principles that govern every system RJV builds an... - [Rate limiting per user not per IP](https://rjvtechnologies.com/rate-limiting-per-user-not-per-ip): Most rate limiting is done per IP address. This creates a problem: when multiple users sit behind the same NAT (an office, a VPN, a corporate network), one u... - [Restrict access by IP address](https://rjvtechnologies.com/restrict-access-by-ip-address): Exposing internal services to the internet is necessary for remote access but creates a security risk. Without IP restrictions, anyone who knows the URL can ... - [Search papers by meaning, not keywords](https://rjvtechnologies.com/search-papers-by-meaning-not-keywords): Semantic search over a research corpus requires embedding-based retrieval, not keyword matching. This paper demonstrates a pipeline with 512-token chunks, local embeddings, pgvector indexing, and... - [Single sign-on is a security control](https://rjvtechnologies.com/single-sign-on-is-a-security-control): Without single sign-on, users create separate accounts for each application. They reuse passwords across services. They choose weak passwords. When an accoun... - [Subscription billing done right](https://rjvtechnologies.com/subscription-billing-done-right): Subscription billing breaks at the edge cases. A customer upgrades mid-cycle. A plan change requires proration. A refund needs to reconcile the ledger. Most ... - [The Unified Model Equation](https://rjvtechnologies.com/unified-model-equation): The Unified Model Equation expresses inputs, computation, and outputs as a single verifiable function producing bit-identical results. This paper derives the equation and demonstrates... - [The deployer model and the honesty of the AGI naming](https://rjvtechnologies.com/the-deployer-model-and-the-honesty-of-the-agi-naming): This article documents the engineering principles that govern the RJV Platform. These are not aspirations. They are rules that every commit, every deployment... — unique perspective on The Deployer... - [When owning infrastructure is the better decision](https://rjvtechnologies.com/self-hosting-vs-saas): A practical comparison between owning infrastructure and renting external platforms, based on operating constraints and evidence. - [Why the cost-to-serve engine starts with the real cost](https://rjvtechnologies.com/why-the-cost-to-serve-engine-starts-with-the-real-cost): This article documents the engineering principles that govern the RJV Platform. These are not aspirations. They are rules that every commit, every deployment... — unique perspective on Why The Cost... - [Why we hash passwords with bcrypt, not Argon2id](https://rjvtechnologies.com/passwords-and-argon2): How the platform stores passwords, which parameters it runs, and why the construction it uses is the one it can state. ## Service - [Engineering from requirement to handover](https://rjvtechnologies.com/engineering): A scoped engagement: written scope, agreed deliverables, acceptance criteria and handover to the customer.