Sovereign
by design.

The only things that leave the platform are verification answers and aggregate insight, priced per query. Individual records are never sold, transferred or exposed — to anyone, for any price. The boundary is enforced in the query layer itself: there is no API that returns a record.

• No bulk export path exists in the architecture
• Every external product is an answer or an aggregate
• The boundary applies to Novitech too — we operate the platform, we do not mine it

Every deployment runs on infrastructure inside the client’s own jurisdiction. Data does not leave the territory it belongs to — not for processing, not for backup, not for support. Sovereignty is a deployment property, not a policy.

• Compute, storage and backup all in-territory
• No cross-border dependency in the operating path
• Jurisdiction’s own law governs the whole stack

The platform connects and reads; it does not absorb. Originating institutions retain control of their own systems and their own data, and connections operate under terms the mandating authority sets and can revoke.

• Read-only connection as the default posture
• Each institution’s data governed by its own mandate
• Revocation is an operational action, not a negotiation

Every query, every answer and every automated action is logged and reviewable by the mandating authority. The audit trail is a first-class product of the platform — the estate can always answer who asked what, when, and what they were told.

• Immutable logs of every query and answer
• Review access for the mandating authority, standing
• Automated actions carry the same trail as human ones