Three components. One control and evidence layer.
Bifröst Relay, Aegis Engine and Heimdall Console work together to identify risk, apply your policy and keep humans in control.
Bifröst Relay
The connection layer
Connects approved systems, normalises message formats, encrypts in transit and routes conversations to the engine. Designed to minimise unnecessary data movement.
- Connect approved systems and channels
- Normalise and encrypt messages
- Route to the engine and back
- Deployment options to keep data close
Aegis Engine
The decision layer
Detects and classifies risk, evaluates each interaction against your configured policies and applies the action you have defined — allow, warn, block, redact or escalate.
- Detect and classify risk signals
- Evaluate against your policies
- Apply the configured action
- Score severity for triage
Heimdall Console
The oversight layer
Gives risk, security and compliance teams a single place to triage alerts, review incidents, manage policies and produce reporting — with humans in control of decisions.
- Alert triage and incident review
- Policy management and versioning
- Reviewable evidence trail
- Reporting and management information
Every decision gives one clear outcome.
Each evaluated interaction returns a clear, machine-readable outcome and a reason. You configure which action applies to which policy.
Continue unchanged when the interaction is within policy.
Continue but attach a visible or operational warning.
Produce a policy-constrained alternative where configured.
Mask or remove defined sensitive fields before delivery.
Prevent delivery or execution of a clear risk.
Pause pending authorised human review.
Restrict a session after repeated or severe signals.
Route to a named reviewer for a human decision.
Host norse3 wherever suits your business needs.
Hosted, private-cloud or customer-controlled options — subject to validation of your regulatory, security and data-residency requirements.
Hosted
Run by norse3 as a managed service, subject to your validation and data requirements.
Private cloud
Deployed within your own cloud tenancy for tighter data-residency control.
Customer-controlled
Operated inside your controlled environment where regulation requires it.
Access, retention and audit settings are configurable by your administrators. Customer conversations, personal data and incidents are not commingled across tenants by default. We do not make “zero access” claims.
We'll be right there with you, every step of the way.
Discovery → policy mapping → integration → testing → launch → monitoring — validated with your teams at each stage.
Discovery
Understand your conversations, systems, risks and obligations.
Policy mapping
Translate your policies into configurable, testable controls.
Integration
Connect approved channels through Bifröst Relay.
Testing
Validate detections and actions against agreed scenarios.
Launch
Go live with the controls and reviewers you have signed off.
Monitoring
Review evidence, refine policies and report on an ongoing basis.