Structural intelligence inside your boundary.

Run the control plane, PostgreSQL tenant store, graph workers, and existing Rust engine within your own infrastructure—with signed licensing and controlled updates.

Talk to an architect Compare Cloud

Deployment architecture

Designed for the systems your security team already operates.

NET / 01

Private infrastructure

Deploy to Kubernetes or containers in private cloud and on-premises environments.

ID / 02

Enterprise identity planning

Scope the customer identity adapter, group lifecycle, and hardware-backed break-glass policy before deployment.

REL / 03

Controlled updates

Consume signed releases through standard, extended-support, or mirrored channels after release qualification.

AUD / 04

Administrative evidence

Own audit logs, retention, observability, support bundles, and deployment health.

License and operations

Commercial controls without a permanent cloud dependency.

Ed25519-signed license documents carry organization, plan, seat, deployment, feature, issue, and expiration claims. Validation happens locally.

OPS/01Graceful renewal windowsLicense expiry is visible to administrators before it affects service.
OPS/02Optional deployment heartbeatTelemetry is opt-in and can be disabled for isolated networks.
OPS/03Customer-owned recoveryDeployment runbooks define backup, restore, key rotation, and disaster-recovery qualification gates.

LICENSE DOCUMENTEXAMPLE CLAIMS

{

"organization_id": "org_7G2K8P",

"plan": "enterprise",

"max_seats": 100,

"max_deployments": 2,

"features": ["identity_adapter", "audit", "air_gap"]

}

signature Ed25519 · validated without a network request