This page exists so prospective customers, partners, and team members understand how decisions get made at Safeguard — and the principles the leadership holds themselves to. It is intentionally short on vanity bios and long on operating practice. The first signal of a serious company is what it expects from its own leaders.
Hritik is the founder of Safeguard and leads product direction, strategy, and the model-family roadmap. His areas of focus are the long-term shape of the Griffin lineup, the hiring bar for senior engineers and researchers, and the key customer relationships — particularly the regulated and sovereign accounts where the platform's deployment shape gets stress-tested. He sets the bar for what shipping discipline looks like at Safeguard and writes the public material that frames how the company explains itself.
The senior functions and what each one owns. We name the role and the responsibility — not the person — because the role is the contract.
Owns the model lineup, training corpus, eval harness, the research log, and the safety constitution applied at the model level. Decides what ships, what gets held, and what gets re-run.
Owns the platform end to end — the control plane, scanner fusion, model serving, surfaces in the IDE and CI. Owns deployment shapes from shared cloud to air-gapped and the performance posture across all of them.
Owns Safeguard's own security posture — tenant isolation, signed weights, key management, incident response, and the bug bounty programme. The internal answer to every question we ask our customers to answer about themselves.
Owns customer relationships across enterprise and public-sector accounts, and the partner programme. Joint go-to-market with channel partners, named-account coverage, and the renewal motion.
Owns SOC 2 readiness, ISO 27001, FedRAMP HIGH posture, customer questionnaire automation, and regulator engagement. The function that turns the platform's controls into evidence the buyer's auditor can accept.
Owns the hiring standard, the leadership operating manual below, and the values plus constitutions framework. The function responsible for whether the company looks like its writing six months from now.
Five rules. They are the leadership operating manual. We read them out loud at the start of new-hire onboarding for senior roles.
Every senior meeting has a "what are we wrong about" item. Disagreement is not a problem; uncoded disagreement is. If a senior leader leaves the room with a private objection that did not surface in the room, the meeting failed.
Major decisions are documented in a short memo before a meeting. The meeting reviews the memo; it does not substitute for it. If the memo cannot be written, the decision is not ready and the meeting is premature.
Small reversible decisions move at the lowest competent level. Irreversible decisions go up. Confusing the two is a leadership failure — escalating a reversible call wastes the room; lowering an irreversible one risks the company.
Every product decision packet includes the customer-evidence summary and the engineer-impact summary. A decision that did not consult those two summaries is sent back. Neither is allowed to dominate; both are required to be present.
If a customer-facing incident happens, the RCA is read by everyone, not buried. Names of people are omitted; names of components are not. The intent is to make the next incident shorter, not to make the previous one quieter.
What we are building, who it is for, and how this quarter connects to the next two — written down, updated when it changes.
If a teammate asks for feedback, they get it inside a day. Not next sprint, not next review cycle.
Mistakes are owned by leadership in public and corrected with the team in private. Never the inverse.
How bands work, how equity works, how promotion works. Documented and the same for everyone at the same level.
When a non-trivial decision is made, the reasoning is recorded. People who were not in the room can still understand why.
Structural changes are communicated to affected people first and given a runway. Engineers should never learn their manager changed from a hallway chat.
We hire for judgement and then expect it to be used. A title is permission to decide, not a reason to defer.
Write clearly. Disagree directly. Hedging that protects the writer at the reader's expense is not a virtue.
The work is the deliverable, not the role. If something is broken inside your remit, it is yours to fix or yours to surface.
Whatever function you sit in, be the person in the room who can answer the second-level question, not just the first.
Every call, every email, every demo — the customer is giving us time we have to earn back. Show up prepared.
Async first, meetings sparing. If a meeting can be a document, it is a document. If a document can be a paragraph, it is a paragraph.
Base pay is at market for the role and the location. Equity is granted with a written explanation of the vesting shape, the strike convention, and the dilution outlook — not just a number and a date. Equity that is granted but not understood is worse than no equity at all.
Promotions require the role to exist. We do not invent titles to retain people, and we do not promote into roles whose scope has not been written down. If the work is there, the title follows; if the work is not there, the title does not exist.
Offers do not change because someone negotiates harder. The first offer is the best offer at that level — same conversation, same outcome, every time. The point is to remove the tax on people who do not enjoy the negotiation game.
We hire for how someone thinks, not where they last worked. The brand on the resume is information, not a decision.
Every candidate writes — a short technical document or design memo — and a senior reader reviews it. Bad writing usually means muddled thinking.
A small take-home, paid for the candidate's time, instead of a timed whiteboard. It reads like the work the role actually does.
Two senior reviewers, two perspectives. An offer goes out only when the case for the hire is written down and survives the second pair of eyes.