01 Isolation
Schema Boundaries
Every tenant's tables, Memoria nodes, and catches live in a distinct PostgreSQL schema.
isolatedIsolation Architecture
Data & infrastructure control layers.
How AEGIS preserves tenant autonomy across shared and private deployments.
02 Credentials
BYO API Keys
Tenants configure their own OpenAI, Anthropic, or OpenRouter keys without shared pool exposure.
tenant-keyed03 Foundation
Docker Stack
Application stack (Flask, Postgres, LiteLLM, Redis) is fully dockerized for private cloud deployment.
portable04 Local LLM
Ollama / vLLM
LiteLLM supports routing to self-hosted Ollama or vLLM endpoints for zero-cloud LLM setups.
air-gapped-seed05 Data Exit
Tenant Export & Wipe
Full JSON/CSV export and automated schema drop paths guarantee clean operational exit.
exportableStatus Matrix
Sovereignty capabilities posture.
Current production mechanisms vs ongoing verification steps.
Live / Evidenced
- Multi-tenant PostgreSQL schema isolation (`search_path = tenant_slug`).
- Tenant-scoped IMAP and HubSpot connector credentials.
- BYO provider API key configuration in tenant Settings.
- Full tenant data export API (`/settings/export`).
- Docker compose containerization for app, db, and proxy.
Live Seed / Hardening
- Automated dry-run proof for GDPR Article 17 subject erasure.
- Clean-room Docker boot script verification without external internet calls.
- Self-hosted Ollama fallback configuration for air-gapped deployments.
- Backup and restore runbook verification for single-tenant VPCs.
Not Claimed
- Claim-grade verified air-gapped deployment (pending clean-room audit).
- Universal zero-egress guarantee when using public cloud LLMs (OpenAI/OpenRouter).
- SOC 2 / ISO 27001 formal compliance certifications.
- On-premise hardware appliance distribution.
Review Security & Diligence Documentation.
Read our security architecture overview, privacy posture, and evaluator diligence FAQ.