Built for networks that are cut off, classified, or both.

Fides Q-View™ installs without reaching out and runs without calling home. Every decision on the data is logged for compliance.


DEPLOYMENT

The same software at the edge and at the hub.

Edge

A single node beside the sensors that keeps working without a link and catches up with the hub when the link returns.

Hub

Many sites in one picture, on the Kubernetes you run, with the storage and identity systems you already have.

Air-gapped

One signed offline bundle: software, charts and maps. Verified on the far side before it is loaded.


DATA PROTECTION

Markings and keys stay with the data

FIPS-validated cryptography

The only cryptography in the running system; services refuse to start without it.

Markings on every record

Classification and handling controls travel with the data, from the sensor onward.

Your keys

Use your own key management service, or the one Q-View bundles.

Every decision has an actor

What a person decided and what an automated policy decided are recorded alike, with who and why.


Secure from the get-go

SUPPLY CHAIN

Signed and attested

Every image is signed, with a software bill of materials and build provenance, verifiable offline.

Pinned and scanned

Every dependency pinned and checked for known vulnerabilities and licenses before it is used.

Least privilege

Services run as unprivileged users on read-only file systems, with every capability dropped.

Built in the US

Developed and engineered in the United States, by US citizens.