Built for networks that are cut off, classified, or both.
Fides Q-View™ installs without reaching out and runs without calling home. Every decision on the data is logged for compliance.
DEPLOYMENT
The same software at the edge and at the hub.
Edge
A single node beside the sensors that keeps working without a link and catches up with the hub when the link returns.
Hub
Many sites in one picture, on the Kubernetes you run, with the storage and identity systems you already have.
Air-gapped
One signed offline bundle: software, charts and maps. Verified on the far side before it is loaded.
DATA PROTECTION
Markings and keys stay with the data
FIPS-validated cryptography
The only cryptography in the running system; services refuse to start without it.
Markings on every record
Classification and handling controls travel with the data, from the sensor onward.
Your keys
Use your own key management service, or the one Q-View bundles.
Every decision has an actor
What a person decided and what an automated policy decided are recorded alike, with who and why.
Secure from the get-go
SUPPLY CHAIN
Signed and attested
Every image is signed, with a software bill of materials and build provenance, verifiable offline.
Pinned and scanned
Every dependency pinned and checked for known vulnerabilities and licenses before it is used.
Least privilege
Services run as unprivileged users on read-only file systems, with every capability dropped.
Built in the US
Developed and engineered in the United States, by US citizens.