The conversation is the surface
Status, proposals, and receipts appear inline, in plain language. It's where you review findings, edit a plan, and approve — but message bodies never store raw dataset rows.
A workspace that shows its work.
Cernavo is a conversation you can read, backed by a run you can trust. The conversation shows status, proposals, and receipts; the canonical run, artifacts, and retention state live on the server. You stay in control at every step.
The surface
A conversation on top. A canonical run underneath.
You read and act in the conversation. The truth of what happened lives on the server — so the receipt you see and the record we keep stay in agreement.
The run is the source of truth
The canonical run, its artifacts, and retention state live server-side. Proposal and event payloads don't store upload bytes — the workspace stays honest about what actually ran.
The guarantee model
Three guarantees, in order.
The workflow-state rail isn't decoration — it reflects a sequence the product enforces. Approve first, execute deterministically, then verify and hand you the evidence.
FIRST
Approval before mutation
Nothing touches your dataset until you approve a specific plan. Your approval records exactly which tasks were authorized.
THEN
Deterministic execution
Approved tasks run as fixed transforms. The same input and the same plan always produce the same output — no silent or generative edits.
FINALLY
QA and evidence
The result is checked against the approved plan, then handed to you with a change manifest and an approval record you can keep and audit.
Honest scope
What Cernavo is — and what it isn't.
The private beta is deliberately narrow. Knowing the edges is part of trusting the middle.
What it is
- A reviewed cleanup workspace for low-sensitivity, sanitized tabular files.
- Approval-gated and deterministic, with a traceable record of every run.
- A small, founder-hosted invite-only beta you can reason about.
What it isn't
- Not a general-purpose data platform or an automated "AI fixes your data" black box.
- Not a compliance product — no SOC 2, HIPAA, PCI, or GDPR data-residency claims.
- Not publicly available — there is no self-serve signup in this release.