How KESTREL reports evidence

Newly Verified Assessment

Claims were independently checked against retained authoritative source evidence. Claim-to-source bindings show what supports each verified claim.

Previously Verified Evidence Reused

An equivalent verified record was restored with its original sources and verification date. No new provider call or new-work quota is used.

Provider-Assisted Report

A bounded provider generated a useful candidate report after verified memory and native evidence did not answer the question. It is clearly pending independent verification and is not canonical truth.

Insufficient Evidence or Safety Refusal

KESTREL states whether evidence was insufficient, an operational control blocked completion, or a deterministic safety boundary applied. It does not manufacture sources.

Documents, images, and bounded video

TXT, Markdown, PDF, DOCX, JPG, JPEG, PNG, MP4, MOV, and WebM are processed privately. KESTREL retains the byte-authentic original, its byte length and SHA-256 source binding, bounded derived representations, and provenance until you delete that workspace. Format-specific extraction and normalization affect working representations, not the authoritative original. Images and video receive bounded semantic analysis; authenticity validation runs only when explicitly requested.

Private storage and deletion

Originals and private derived content are isolated by account on encrypted storage and survive sign-out, session expiry, browser closure, and service restart. Workspace deletion removes that workspace's original, private representation, source binding, and conversation and verifies owner-bound source cleanup before reporting completion. Complete account deletion is not currently offered. The receipt separately states whether an eligible de-identified learning candidate survived.

Learning cycle

Before workspace deletion, KESTREL may derive a separate candidate only after removing identifying, confidential, embedded-metadata, and re-identification material. Failed or uncertain sanitization destroys the candidate. A retained candidate has no account or workspace link and remains unverified until independent claim verification qualifies it for reusable memory. Provider output never verifies itself.

Plans

Ask Once — available from the public page; one evaluated question with a complete Proof Card and no membership or payment.

Free Trial — Free; 10 evaluated questions, 30-day temporary history, and no credit card required.

Research Plan — $100/month; saved private history and configuration-driven bounded capacity. Subscriptions use PayPal; Research activates only after server-side provider verification. Collections, exports, and priority processing are not included in this release.

Enterprise — Contact Us; teams and SSO, private corpora, and audit/deployment controls are configurable through consultation and are not active by default.

KESTREL does not handle payment-card data. Browser redirects and parameters cannot grant paid access.