// platform · deployment specs
Enterprise architecture. Self-hosted simplicity.
Everything an IT group asks before a security review, on one page. The platform runs on your hardware, behind your boundary, and stores its record in formats you can read without us.
$ docker compose up -d
+ core · worker · postgres — healthy
$ deploy --target dokku
+ released · 0 external calls
# or: az containerapp up --name core
// illustrative — not customer data
// delivery
What ships
- + Self-contained container images — no vendor runtime to install alongside them
- + One-click Dokku configuration for single-server deployments
- + Azure Container Apps runbooks where a private cloud tenant is the target
- + Versioned releases with a documented upgrade path and rollback
// core · the data layer
What it stores data in
- + PostgreSQL as the operational system of record
- + Parquet on S3-compatible object storage for the analytical tier
- + DuckDB as the query engine over that storage
- + Open formats end to end — the storage outlives any vendor, including us
// capture · the edge
What it runs on at the edge
- + Commodity gateways — BeagleBone Black and Raspberry Pi–class hardware
- + Ethernet, Wi-Fi, or cellular backhaul; ultra-low-bandwidth sync throughout
- + Serial, GPIO, and I2C device integration via our open-source hardware layer
- + Gateways authenticate with rotating BCrypt-hashed keys on a configurable heartbeat
// topology
How it connects
- + Self-hosted over WireGuard where a network link exists
- + Fully air-gapped operation where one does not — sync resumes when a link returns
- + Private Azure tenants, private endpoints, and segmented networks supported
- + No unauthorized external calls; the deployment is auditable from your side
// governance
What it records about itself
- + Audit logging for operational and administrative activity
- + Least-privilege roles enforced at the data layer
- + An ordered event log — nothing lost when the link drops, nothing reordered when it returns
- + Replay of any window, which is what makes the record defensible in an audit
// compliance
The honest version
Engineered for ITAR, EAR, CMMC, and NIST environments. We are designed to support your compliance posture; we do not certify compliance. If your auditor needs that stated in writing on our letterhead, ask and we will send it — it is the same sentence.