Your data stays yours. Provably.
Sovereignty is not a checkbox on a PDF - it is an architecture. Ektasi can be self-hosted end to end, runs AI on your own hardware, isolates every tenant in the database engine, and erases data cryptographically. Built with India's Digital Personal Data Protection Act, 2023 in mind.
Self-Host the Whole Platform
Ektasi ships as a single deployable codebase. Run it in your own cloud account or on your own hardware - the marketing site, the dashboard and every module in one place, under your control.
Keep AI on Your Network
Point the AI resolver at a self-hosted, OpenAI-compatible model (Ollama or vLLM). Sensitive prompts and documents never traverse a third-party API - inference stays inside your perimeter.
Tenant Isolation in the Engine
PostgreSQL Row-Level Security means a query scoped to one tenant cannot return another tenant’s rows. Isolation is enforced by the database, not by application-layer good intentions.
Per-Tenant Cryptography
Secrets are sealed with AES-256-GCM using per-tenant, HKDF-derived keys. The data-encryption key is derived, never stored - so a leaked database is not a leaked vault.
Cryptographic Erasure
Decommissioning a tenant destroys its per-tenant salt. Ciphertext - including anything in backups - becomes permanent mathematical noise. Deletion you can actually prove.
Forensic Audit Ledger
An append-only audit log, enforced by a database trigger, records every sensitive action. Evidence for a DPDP audit or a customer security review is generated as you operate.
Architecture that maps to your obligations.
Ektasi is engineering, not legal advice. Confirm your specific compliance posture with counsel - the platform is built to make that posture defensible.
Data residency
Deploy in-country. Personal data of Indian principals can stay on infrastructure you choose and control.
Purpose & consent
Per-tenant boundaries and audit trails support consent-linked processing and demonstrable accountability.
Right to erasure
Cryptographic shredding gives data principals erasure that survives into backups - not a soft delete.
Breach evidence
The append-only ledger provides the forensic record a Significant Data Fiduciary is expected to keep.
Own your platform. Own your data.
Ask us for a self-hosting walkthrough and a data-sovereignty review mapped to your regulatory reality.