ॐ
Adhyakṣa
powered byHostingSpell
Technical Security & Sovereignty Charter

Data Sovereignty (Swaraj) & Security Architecture

Architectural Specification • Zero Telemetry Guarantee • Version 2.4-Sovereign

1

Zero Cloud Telemetry

Adhyakṣa does not phone home, report user behaviors, or stream usage statistics to third-party ad networks.

2

Cryptographic Isolation

PostgreSQL Row-Level Security (RLS) and schema isolation enforce strict tenant boundaries at the database engine level.

3

Autonomous AI Operations

Direct provider connections. Prompts route directly to your LLM endpoints with 0% intermediary markup and zero retention.

4

Perpetual Open Schema Export

Export standard PostgreSQL SQL dumps and CSV files anytime. Zero proprietary locks or export licensing fees.

1. Cryptographic Encryption Standards

Adhyakṣa implements defense-in-depth cryptography across all layers of the operational stack:

Encryption in Transit (TLS 1.3): All client-server sessions, POS cashier terminals, and branch node synchronizations utilize TLS 1.3 with Perfect Forward Secrecy (ECDHE-ECDSA/RSA) and strict HTTP Strict Transport Security (HSTS).
Encryption at Rest (AES-256): Database storage volumes, document attachments, and continuous rollback log snapshots are encrypted at rest using AES-256 with automated key rotation.
Private AI Key Vaulting: User-supplied AI provider keys (OpenRouter, Claude, OpenAI) are encrypted in the database using envelope encryption and decrypted only in ephemeral server memory during inference requests.

2. Bare-Metal Dokploy & Docker Self-Hosting Architecture

For organizations subject to strict data localization laws or air-gapped security protocols, Adhyakṣa is engineered to operate 100% self-hosted:

  • Zero Cloud Dependencies: No hidden reliance on proprietary HostingSpell cloud endpoints or verification servers.
  • 1-Click Dokploy Integration: Deploy using open-source Dokploy or standard Docker Compose configuration files on any Linux VPS or bare-metal server.
  • Air-Gapped Private LLM Support: Connect self-hosted instances to local Ollama, vLLM, or TGI endpoints on your local network.

3. Immutable WORM (Write-Once-Read-Many) Audit Vault

To satisfy stringent regulatory compliance (including SOC 2, HIPAA, and financial accounting standards), Adhyakṣa includes an append-only audit trail recording:

  • Every manual and AI-assisted transaction
  • Biometric clock-in timestamp verification
  • Role permission assignments and token grants
  • 1-Click Rollback executions and reversals
HostingSpell LLP • Sovereign Security OfficeExplore Enterprise Sovereignty Blueprint →