This page documents the posture Laytimely operates under today and the long-pole accreditation work now under way. It is written for evaluators, counsel and operational partners, not as marketing copy.
Operates within the exclusively-defence exclusion. Deliberately outside the migration and border high-risk category whose obligations apply from around 2 December 2027. Explainability and human-in-the-loop are operating principles, not retrofits.
Written policy in force. End-use clauses are baked into every contract template, excluding detection, tracking and reporting of small craft and persons for interdiction. We anchor strictly on sanctions, fishing, critical-infrastructure protection and air-defence, and stay categorically clear of migration surveillance.
Regulation (EU) 2021/821 self-classification complete. AIS and object tracking and sensor-fusion outputs are not controlled cyber-surveillance items, and the Article 5 catch-all does not engage because person-tracking with repressive end-use is explicitly out of scope.
Data Protection Impact Assessment in progress for the open civilian layer. Personal data is minimised by scope. The system operates on vessel, aircraft and platform signatures, not on persons.
TabbPay (Greek IKE), trading as Laytimely. Both founders Greek nationals. EU effective control from incorporation; EU-hosted IP and data; cap-table structured for HURDSE, FSC and PSC accreditation and for EDF and EDIP eligibility.
HURDSE / EMΠΕΑΤ registration under PD 59/2025 (via GDDIA / ΓΔΑΕΕ). Facility Security Clearance and Personnel Security Clearances are 6–18 month lead-times. We filed early as a deliberate barrier-to-entry posture. The DIANA Phase 1 deliverable does not depend on clearance; the Phase 2 extension to classified national feeds does.
Built to export to CISE, MARSUR, EMSA and NATO STANAG standards. The open layer is designed to stay inside the allied information-sharing fabric, not become a national silo.
Decision-support triage with confidence, reasoning and SHAP attribution on every output. A human operator decides. The system is not, and will not be, an autonomous weapon. It takes no autonomous action.
Security researchers and operational partners who have identified a vulnerability, an ethical concern, or a compliance question should contact us directly. We do not (yet) operate a formal bug-bounty programme; we do acknowledge every report and we coordinate disclosure responsibly.
founders@laytimely.com. Please include 'Responsible disclosure' in the subject.