AI Security, Control
& Governance Platform

What is shadow AI and why is it a risk?

Shadow AI refers to AI tools that employees adopt and use without IT or security approval — ChatGPT, Copilot, Claude, and others. The risk is that company data, client information, and proprietary content enters these models with no policy, no visibility, and no audit record. Most organizations discover they have a shadow AI problem only when a client asks, an auditor flags it, or an incident happens.

How does Qadar compare to our existing DLP or SIEM?

Traditional DLP and SIEM tools were built to catch files, URLs, and network events. They do not inspect the content of AI prompts or the responses that come back. Qadar was built specifically for the AI layer — it understands prompt structure, detects sensitive content in context, and logs the full policy decision, not just a flagged event. Qadar feeds your SIEM via webhook or S3 — it is additive, not a replacement.

Do employees need to change their tools to use Qadar?

No. Qadar operates at the API gateway layer, between your team's AI tools and the model providers. Employees continue using the tools they already use. The governance layer runs transparently in the background.

Where is our data processed and stored — can we keep it in the EU?

Qadar is designed with data residency as a first-class control. Prompt metadata, policy decisions, and audit logs can be scoped to EU-region infrastructure. We do not use your prompt content to train models, and raw prompt data does not leave your defined residency boundary. Enterprise and Regulated tiers include expanded jurisdiction and retention controls.

What happens to the prompts my team sends — does Qadar store them?

Qadar inspects prompts at the point of submission to enforce policy — it does not store raw prompt content by default. Audit records log the policy decision, the classification outcome, and metadata, not the full prompt text. Customers who need forensic log retention for regulated environments can enable that separately under a defined retention policy.

How does Qadar integrate with our existing security stack — SIEM, MDM, SSO?

Qadar is additive, not a replacement. Shield Control exports audit events to your SIEM via webhook or S3, connects to your IdP for SSO and SCIM-based provisioning, and integrates with MDM and MAM for mobile device policy enforcement. ITSM and GRC integrations are available on Enterprise tiers for customers who need incident ticketing and compliance evidence in existing workflows.

How long does deployment take and what does it require?

Most teams reach meaningful coverage within days, not months. Shield Web deploys as a managed browser extension through your existing device management tooling. Shield Desktop installs as a lightweight agent on macOS and Windows. Shield Mobile uses your MDM or a managed workspace app. Shield Control is the cloud admin layer that ties policies together — it does not require an on-premise component or infrastructure changes.

Does Qadar cover AI agents and MCP-based toolchains, not just chat interfaces?

Yes. Shield Control includes a governance layer for internal AI systems, APIs, and agent workflows — including MCP-connected tools. You can set per-model and per-agent policies, inspect tool call patterns, and log agent decisions as part of the same audit trail as end-user prompt activity. This is available on Enterprise tiers and above.

What is your pricing model — why is there no price list on the website?

Qadar is quote-led. The right package depends on the number of users, the surfaces you need to cover (browser, desktop, mobile, gateway), and your compliance requirements. We scope every engagement before quoting so you are not paying for controls you do not need. Request a demo and we will scope a proposal based on your actual AI footprint.

What is Qadar's compliance posture — SOC 2, GDPR, EU AI Act?

Qadar is built to support customers operating under GDPR and similar data protection frameworks, with data residency controls, processor agreements, and audit export capabilities that map to compliance evidence requirements. SOC 2 and EU AI Act alignment details are shared under NDA as part of the enterprise scoping process. Our platform is designed to produce the audit trail and policy evidence your reviewers and auditors will ask for.