Dell × NVIDIA Hackathon

Scanclaw

Local AI Compliance Gatekeeper

An always-on AI agent that inspects every file the instant it lands — detecting exposed sensitive data entirely on-device, with zero cloud dependency.

~10s
File to verdict
0
Cloud calls
On-device
Hermes 3 · GB10
The Problem

Sensitive data quietly lands where it shouldn't.

A spreadsheet of Social Security numbers dropped into a shared folder. A payroll export saved to the wrong drive.

No one reviews every file as it arrives — so the exposure sits undiscovered until an audit or a breach.

Maximum penalty
4%
of global annual revenue

The ceiling for a single GDPR violation.

The Gap

The organizations that need this most can't use the cloud.

Cloud compliance tools
Legally barred for banks, hospitals, and defense — regulated data cannot leave the premises.
Cannot be used
Manual review
Staff spot-check a small fraction of files. Slow, unscalable, error-prone by nature.
Misses most exposures
Scanclaw
Automated and fully on-premises. Inspects every file as it arrives, without external calls.
Automated + local
The Solution

An always-on agent that guards the door.

Scanclaw inspects sensitive data the instant it appears and acts on it — entirely on-device, nothing leaves the machine.

Drop

A file lands in the watched folder

Inspect

The agent reads and scans it

Cleanreturned to the user
Violationquarantined
1 drop
User action
1 verdict
Agent decision
0 bytes
Leave the box
Architecture

Four cooperating agents.

01
Watcher

Detects a new file the moment it appears

02
Reader

Opens it and reads every cell

03
Verdict

Regex and a local model judge the content

04
Enforcer

Returns it clean, or quarantines it

🔒

Privacy by design. The verdict carries only the violation type and location — never the raw value it found.

Local-first by construction

Nothing leaves the box.

NemoClawSecure agent runtime and policy enforcement
OpenClawThe always-on agent framework
OpenShellKernel-level sandbox with default-deny egress
Hermes 3 70BLocal model via Ollama — the judgment layer
Dell GB10All inference runs on this device
External calls
0

Every byte of inference happens on the GB10. Disconnect the network — it still runs.

Live Demonstration

See it catch a real file.

drop the file · watch it get caught · it is quarantined

Runs Scanclaw's detection engine in-process — your file is scanned on the spot, never sent to a third party.

🛡️

Pick a sample (or paste your own), then drop it into the gatekeeper to see the verdict.

Business Value

A mandated purchase, with one viable vendor.

Who buys

Banks, hospitals, law firms, defense — regulated industries with dedicated compliance budgets.

Why it's required

Compliance is a legal obligation, not discretionary spend. Failure means fines and lost licenses.

Why Scanclaw

The only option that's automated AND runs on the customer's own hardware. Cloud rivals are disqualified.

Return on investment
One
prevented leak

pays for the entire deployment.

Roadmap

Today a folder. Tomorrow the perimeter.

Today

Gatekeeps a watched folder

Next

Sits at the file-system layer

Then

Email and upload gateways

Vision

Full on-device DLP enforcement

Your data never leaves the room.