Constitutional Intelligence

Aligned to European values.
Engineered for global enterprise.

Constitutional Intelligence is a built-in policy router that constrains every model output against a constitution rooted in European fundamental rights — and a customer-defined ethics layer on top. Versioned. Auditable. Customizable per tenant.

Explore the constitution Regulatory mappings →

Refusal heuristics aren't enough.
Values are.

Open-source LLMs ship with whatever safety training their authors had time for. That's not a contract — it's a guess. Constitutional Intelligence replaces the guess with a versioned, inspectable, customizable rulebook that runs at the runtime layer on every inference.

📜

Versioned, not vibes

The constitution is a git-style versioned artifact. Every change is signed, reviewable, and deployable per tenant. Your DPO can audit the rulebook. Your regulator can see what was active on a given date.

🌍

Rooted in EU rights, valid worldwide

The base layer is the EU Charter of Fundamental Rights, EU AI Act prohibitions, and GDPR. Customers extend it for their industry (HIPAA, MiFID II), their jurisdiction (UK DUAA, CA SB 942, Brazil PL 2338), and their internal ethics policies.

⚙️

Enforced at runtime, not at training

Training-time alignment is unverifiable in a fine-tuned downstream model. Constitutional Intelligence enforces policy at inference, where the actual decision is made — every time, with cryptographic evidence.

Six rights, encoded.

The base constitution is a translation of European fundamental-rights doctrine into machine-checkable policies, evaluated against every prompt and every response.

Human dignity

No outputs that demean, dehumanize, or instrumentalize a person. Specifically forbidden: outputs treating individuals as data points without context, uses of personal characteristics for stereotyping, content that degrades a class of persons.

EU Charter Art. 1 · EU AI Act Art. 5(1)(c)

Non-discrimination

No outputs whose distribution of opportunity or risk is correlated with protected characteristics in ways the customer has not explicitly authorized. Bias-detection metrics computed per-tenant. Drift monitored continuously.

EU Charter Art. 21 · GDPR Art. 9

Privacy by design

Zero customer data ever leaves the customer's perimeter. PII detection and redaction in prompts and responses. Subject Access Requests served from the audit chain in seconds. No telemetry. No training on customer prompts.

EU Charter Art. 7-8 · GDPR Art. 5, 25

Algorithmic transparency

Every AI-generated output is watermarked with HMAC + human-readable disclosure in 6 languages. Every decision has a causal explanation available on request — Integrated Gradients, MuPAX, or EVIDENCE — derived from the model's internal states.

EU AI Act Art. 50 · GDPR Art. 22

Democratic oversight

3-level human oversight queue with mandatory escalation thresholds. 72-hour kill-switch. Cryptographic audit chain. Regulator-mode read access. The constitution itself is reviewable by the customer's ethics committee.

EU AI Act Art. 14 · CA SB 942

Cultural plurality

Constitutional Intelligence runs in 24 languages and is sensitive to jurisdiction-specific legal norms — UK DUAA, Italy Law 132/2025, Brazil PL 2338, Canada AIDA, China GB/T 45654 — without requiring a fork of the model.

EU Charter Art. 22 · EU Treaty Art. 3

Constitution → decision → evidence.

A live trace of how the router resolves a single inference call.

Live Router Trace · Call ID 4c30…
Constitutional decision for a credit-application query
ENGAGED
Article checkedEU Charter Art. 21 · Non-discrimination
EU AI ActArt. 5(1)(c) · Social scoring · ❌ prohibited
GDPRArt. 22 · Automated decisioning · ⚠ requires oversight
MiFID IIRecord-keeping · ✓ chain entry committed
Constitutional score0.94 / aligned
Final action→ deliver, log, escalate to oversight L1
🇪🇺
Evidence committed to chain
HMAC hash · auditable forever · regulator-mode export

One constitution.
Infinite domains.

A bank, a hospital, and a defence ministry all need an aligned AI — but not the same aligned AI. Constitutional Intelligence is built as a stack of versioned, composable layers, so each deployment carries the exact rulebook its industry, its jurisdiction, and its ethics committee require.

A four-layer stack.

Higher layers compose on top of lower layers — never replace them. Hard prohibitions in the base layer (e.g. social scoring, manipulation) stay locked at every level above.

04 Tenant Layer Customer-defined
Your ethics committee, your code
Internal policies your DPO, ethics committee, and CISO own. Tone-of-voice, additional refusals, escalation thresholds, watermark contents, retention overrides.
Custom refusals Tone & brand voice Internal red lines Per-team overrides
03 Jurisdiction Layer Plug-in pack
Where the system runs
Country and region-specific obligations. Plug in only the jurisdictions you operate in — the runtime applies them in priority order.
UK DUAA 2025 Italy Law 132/2025 CA SB 942 Brazil PL 2338 Canada AIDA China GB/T 45654
02 Industry Layer Pre-built packs
What kind of AI you're running
Domain-specific obligations: clinical decision rules for healthcare, MiFID II record-keeping for finance, GCP rules for pharma, DORA resilience for ICT. Each packaged as a reviewable bundle.
Healthcare Financial Services Insurance Defence Pharma R&D Legal Public Sector
01 Base Layer Immutable · locked
European fundamental rights
EU Charter of Fundamental Rights · EU AI Act Article 5 prohibitions · GDPR principles · Council of Europe Framework Convention on AI. Locked. No tenant can override these.
EU Charter EU AI Act Art. 5 GDPR CoE Framework

Composed in a typed DSL.

Each tenant declares the layers they need. The runtime resolves conflicts in priority order, validates the composed constitution against the locked base, and signs the resulting bundle.

Tenant constitution · italmed-hospital.yaml
# Tenant: italmed-hospital · v2.3 extends: [email protected] # locked base industry: pack: [email protected] # Annex III + ISO 42001 pii: phi_strict oversight: level_3_mandatory jurisdictions: - italy/dpa-2018 - eu/mdr # Medical Device Reg. - eu/ehds # Health Data Space tenant: refusals: - terminal_dx_without_human - paediatric_dosing_unsupervised thresholds: halluc: 0.45 # tighter than default grounding_min: 0.85 watermark: languages: ["it", "en"] disclosure: explicit retention: 10y ethics_committee: review_cycle: quarterly sign_off: required
📜 Git-versioned · auditable diffs
🔏 Cryptographically signed at deploy
🔍 Audit chain records active version
⚖️ Hot-swap without redeploy

Six domains. Six constitutions.

Concrete examples of how the same base constitution becomes six different operational rulebooks. None of these examples replace the base layer — they extend it.

⚕️
Healthcare
Annex III · MDR · EHDS
Adds
  • Mandatory L3 human oversight for diagnosis, dosing, triage
  • PHI redaction in prompt & response
  • KDIGO/EBA/NICE guideline cross-checks
  • Paediatric and frail-elderly safeguards
Tightens
halluc ≤ 0.45grounding ≥ 0.85
🏦
Financial Services
MiFID II · DORA · EBA
Adds
  • Per-call MiFID II record-keeping
  • No social-scoring proxies in credit assessments
  • Bias detection on protected characteristics
  • ECB-ready quarterly audit composition
Tightens
halluc ≤ 0.55retention 10y
📋
Insurance
UK DUAA · GDPR Art. 22
Adds
  • AI authorship watermark on every claims letter
  • Causal-XAI panel ready for SAR responses
  • 72h kill-switch wired to ICO investigation
  • Bias monitoring per claim type
Tightens
safety ≤ 0.40oversight L3
🛡️
Public Sector & Defence
NIS2 · EU AI Act High-Risk
Adds
  • Sovereign / classified policy overlay
  • TPM-anchored chain integrity
  • Air-gap verification at every boot
  • Hardened refusals on dual-use content
Tightens
safety ≤ 0.30retention indefinite
💊
Pharma R&D
ICH E6(R3) GCP · EMA
Adds
  • GCP-aligned trial design refusals
  • Patient-cohort isolation
  • EMA / FDA evidence-pipeline format
  • Lab-notebook authorship watermarks
Tightens
grounding ≥ 0.90retention 15y
⚖️
Legal Reasoning
Bar association overlays
Adds
  • Mandatory citation grounding (no fictitious case law)
  • Per-jurisdiction professional-conduct rules
  • AI-authorship disclosure on every document
  • Privileged-information detection
Tightens
halluc ≤ 0.30citations required

A constitution change
is a governance event.

The same versioned-and-signed workflow your DPO and ethics committee already use for policy documents — applied at the millisecond timescale of LLM inference.

01 · DRAFT
Author & review
Compliance & engineering author proposed changes in the typed DSL. Diff is reviewed against the active version like any code change.
02 · VALIDATE
Static & semantic checks
The validator confirms every edit respects the immutable base, runs against a corpus of regression prompts, and surfaces any conflict with locked rules.
03 · SIGN
Ethics committee sign-off
Mandatory sign-offs are gathered: DPO, CISO, ethics committee chair. Each signature is HMAC-bound to the exact constitution bytes.
04 · DEPLOY
Hot-swap & chain
Active constitution swaps without redeploying the runtime. The audit chain records the change, the signers, and the precise inference at which the new version became active.
Made in Europe with

Bring your DPO & ethics committee.

We do constitutional design sessions with your DPO, ethics committee, and legal team. Output: a per-tenant constitution ready to deploy.