Separate planes
Keep connector execution and sensitive evidence handling close to source systems.
Deployment
Keep the evidence plane where your risk model requires it.
The target architecture supports SaaS control plane, dedicated tenant, customer-VPC data plane, customer-hosted connectors, sovereign, and air-gapped patterns.
SaaS demo available · enterprise modes planned
Key ownership
Support dedicated or customer-managed signing and encryption boundaries.
Operational clarity
Publish availability, freshness, retention, residency, and recovery contracts by mode.
Current limitationOnly the public demonstration is represented by this repository; enterprise modes are roadmap items.