Your data, where you decide. Your keys, in your hands.
Calisto’s application servers, and its default database and file storage, are in the European Union. To keep your data in another country, connect your own database, storage and AI there, and hold the keys yourself.
Where your data lives, and who holds its keys
The same screens are in every Core app’s Settings, under Data Custody, so a business that runs on one app never has to leave it.
Where It Lives
The plain statement, and providers by region.
Your Database
Your own PostgreSQL, tested first.
Your Storage
Any S3-compatible provider.
Your AI
Off, or your own provider.
Your Keys
Held in your own key service.
Entrada da Empresa
Your identity provider.
One Activity Trail
Kept so it cannot be altered.
Requests & Export
Data requests and the whole account.
No region to pick. One honest statement.
Calisto runs in the European Union. A business whose clients require their data elsewhere connects its own database, storage and AI in that country, from providers suggested by region.
In the European Union
Calisto’s application servers, and its default database and file storage.
Providers by Region
North America, Latin America, Europe, Africa and Asia-Pacific, each one listed only once Calisto’s own connection tests pass against it.
The Residency Register
Where each kind of data is held, under which law and on which basis it moves, compared with what is actually connected.
Seu banco de dados. Seu armazenamento. Sua escolha.
Managed, encrypted and in the European Union from day one. Or point at your own whenever you are ready.
Gerenciado não requer configuração
Encrypted and backed up in the European Union. Most businesses never change it, and nothing here has to be set up before you start.
Ou aponte para seu próprio backend
Your own PostgreSQL and your own S3-compatible storage, which is a setting rather than an enterprise contract.
Testado antes de ser comprometido
A connection is tested before it is saved, and the schema initialises from this screen rather than through a migration project.
It fails out loud
If your own database or storage cannot be reached, you see it and you are alerted. Nothing is ever written to Calisto’s own instead.
Seu acesso nunca está em risco
Sign-in always stays on the managed database, so a mistake in your own infrastructure cannot lock you out of the account.
The data is where you put it. Now the AI that reads it, and the keys that open it.
AI on your terms, or not at all
Off for the Account or a Business
Switch AI off everywhere, or only for one of your businesses.
Your Own Provider
Connect your own AI for each capability, tested before it is saved.
Keys Stored Encrypted
Your provider’s key is sealed in Calisto’s vault, never stored as text.
Never Used for Training
Your clients’ data is never used to train models.
Revoke the key, and Calisto cannot open it.
Your account’s stored secrets can be wrapped by a key held in your own key management service. With your own database and storage, the data at rest is already under your own keys.
Keys you hold, rotated without downtime
Your Key Service
A key held in your own OpenBao or Vault, OVHcloud KMS or Scaleway Key Manager.
Rotation Without Rewrites
Rotating your key re-wraps one data key. Nothing else is rewritten.
A Short, Stated Window
A key unlocked is held for five minutes, so a brief outage never stops work and a revocation takes effect within that window.
Who got in, what happened, and what leaves
Entrada da Empresa
Your people sign in through your own identity provider.
One Activity Trail
Custody changes, access to walled records and exports, each entry chained to the one before so nothing can be altered unseen.
Data Requests
Requests from your own customers about their data, answered in one place. You are the controller; Calisto processes.
The Account Export
Every record and a manifest of every file, whenever you want it.
Sovereign comes with every account, beside Purview, Blueprint and Reports, and every Core app shows the same screens in its own Settings.
Questions about Calisto Sovereign
Calisto’s application servers, and its default database and file storage, are in the European Union. There is no region to pick: to keep your data in another country, connect your own database, storage and AI there.
Your business sees that it is unreachable, and an alert goes to you. Nothing is ever written to Calisto’s own database instead.
You can. Your account’s stored secrets can be wrapped by a key held in your own key management service. Revoke it and Calisto can no longer open them.
No. You can switch AI off for your account or a business, or connect your own AI provider for each capability.
No. Sovereign comes with every account, and every Core app shows the same screens in its Settings ▸ Data Custody.
