Prismaid runs on infrastructure you control
Prismaid runs where you run it. That keeps your network, your access rules and your data under your own governance.
Where it runs, and what it connects to
Your environment: data center, cloud account or air-gapped network
Secure entry point
A TLS proxy publishes the only open ports, 443 and 80. Port 80 redirects to HTTPS.
Prismaid services
Saved connection credentials are encrypted at rest, and changes go to a tamper-evident audit log.
Private database network
No published ports, and no route out of the host.
Connections you set up
- Your connected systemsDatabases, SFTP, cloud storage, trading partners, UM systems and FHIR platforms
- External AI providerOptional. Mapping and other AI features can use a local model
- Document AIOptional. AWS Textract or Azure Document Intelligence
- NotificationsOptional. SMTP email, Slack, Microsoft Teams and webhooks
- Sign-in locationOptional. Off unless you choose a geolocation provider
Prismaid has no product analytics, license check or update check.
Deployment
Your data center or cloud account
Deploy with Docker Compose, as separate service containers or as a single unified container.
Air-gapped networks
Install from a signed offline bundle with checksums and SBOMs.
Backup and restore
Follow the backup tooling and restore runbook that come with the release.
Software supply chain
Signed images
Release images are signed with cosign, so you can verify what you deploy.
SBOM and provenance
Each image carries an SPDX SBOM and SLSA provenance.
Vulnerability gate
Trivy scans every image, and any fixable critical vulnerability blocks the release.
Ongoing testing
Automated penetration tests, a web application scan and dependency scans run on pull requests and every week.
In the product
Sign-in
Single sign-on through OpenID Connect, and multi-factor authentication with authenticator apps.
Saved credentials
Connection credentials are encrypted at rest.
Audit trail
Changes are recorded in an audit log protected by a tamper-evident hash chain.
AI under your control
You decide whether to use AI features, and most of them can use either an external provider or a local model you host.
Working through your vendor review
Compliance depends on how a platform is deployed and operated, as well as on the software itself. Tell us what your security and compliance review requires, and we will go through it with you.
See it working on your kind of data
Book a live demo, or tell us what you need to connect.