Every control representation, measured against the technical record.
When a cyber claim turns on what was represented at underwriting versus what the evidence actually shows, that comparison is done by hand — slowly, and one matter at a time. Noctelle produces it as a deterministic, source-cited dossier: neutral, reproducible, and built to withstand scrutiny.
Request a conversation →An attestation is not proof.
Cyber policies are underwritten on representations: the insured attests to multi-factor authentication, endpoint protection, patch cadence, backups. Those attestations are true for the moment they're made — everything after is drift.
When a loss occurs, coverage turns on a single question: does the technical record match what was represented? Answering it means reading forensic findings, application materials, and control evidence against one another, line by line, under deadline.
Today that work is manual, unstandardized, and difficult to reproduce. Two reviewers can reach two answers. Noctelle makes the comparison deterministic and the reasoning traceable to its sources.
Five dispositions. One is assigned to every representation.
An extraction layer proposes structured candidates from the claim record; a deterministic engine decides. The model proposes, the engine decides — and characterization stops where legal judgment begins.
Two axes, resolved deterministically. Their intersection places every representation in exactly one of five frozen statuses — the same result on every run, for every reviewer.
Was the control in force at the moment the record turns on — not merely at some point in the policy period?
Did it cover the systems, accounts, and data the representation actually claims — not a subset that happens to match?
No status carries a legal conclusion. Noctelle does not render coverage determinations, severity verdicts, or opinions on materiality — those remain with counsel. The dossier establishes the factual predicate; the judgment stays where it belongs.
Built to be reproduced, not just read.
Deterministic by construction
The same record produces the same dossier, every run. Extraction candidates are frozen and hashed at intake; the engine's dispositions never vary between reviewers or between runs.
Source-cited throughout
Every disposition traces to the specific evidence behind it. Nothing is asserted that isn't anchored to a source in the record, and the ledger of those sources travels with the dossier.
Chain of custody, sealed
A SHA-256 chain binds the record from intake to output, so the dossier's integrity is verifiable after the fact — the same property the evidence itself is held to.
One artifact: the Noctelle Dossier.
Nine sections, in the order they appear — this is the dossier's own table of contents.
Scope, pipeline posture, and a findings preview at a glance.
Disposition counts and a plain-language summary of every open item.
The technical and claim timelines, set side by side.
Every representation, its disposition, and the evidence behind it.
What's unresolved, why, and what would resolve it.
Every source reviewed — classified, attributed, and hashed.
What was tested, and the boundary of what wasn't.
The evidentiary observations behind each disposition.
Artifact hashes, chained to one canonical proof record.
Runs where the evidence lives. Client-installed, with a local deterministic proof engine — no Noctelle servers, no data retention, air-gap capable.
Maps the record; never argues from it. No conclusions of law, coverage determinations, severity scores, or recommended actions — the judgment stays with counsel.
The people who have to answer the coverage question.
Carrier Coverage & Claims
Leadership assessing representation-versus-evidence at claim time, across a portfolio of matters, on a defensible and consistent basis.
Coverage Counsel
Insurer-side counsel who need the factual predicate assembled and traceable before the questions of materiality and reliance are argued.
Monitoring & Program Managers
MGAs and program managers who need a repeatable, neutral index of control representations against the record as claims develop.
Noctelle indexes what the record shows. It does not advocate, does not decide coverage, and does not render the verdict — it establishes what the evidence supports, and leaves the conclusions to the parties whose role it is to draw them.
Request a conversation.
Noctelle is opening conversations with a small number of design partners. If your practice touches cyber-claim coverage, we'll walk you through a live dossier and where it fits your workflow.
Or write directly — dante@noctelle.ai