Built as if your security team designed it.
Aegis analyzes the most sensitive documents an organization owns: its security policies. Every architectural decision below follows from that fact. This page is written for the security team doing the review; the one-pager below is yours to forward.
Your documents never leave the machine.
Aegis ships as a sealed Docker package that runs on your own infrastructure: a laptop, a VM, or a private cloud. Documents, analyses, scores, and the full history live in a database you own. The only network traffic the system produces is the model API call that powers analysis, and that traffic is governed by the egress controls below.
Default-deny, with a public ledger.
Every outbound request is checked against an allow-list before it happens. The default list contains exactly one host: api.anthropic.com. Anything else is refused, and every attempt, allowed or denied, is written to an egress ledger that administrators can inspect in the app. TLS verification is mandatory and cannot be disabled. The image ships no embedding, vector, or telemetry libraries.
Updates you can verify, and undo.
Framework content updates arrive as offline bundles signed with Ed25519 and verified against a public key baked into your installation. Every file is hash-checked, version continuity is enforced (no skips, no downgrades), installs are atomic, and rollback is one click. Most importantly: bundles carry content only, never application behavior. An update can bring you a new control catalog; it can never bring you new code.
Roles that match how compliance teams actually work.
Five application roles
Admin, compliance manager, analyst, auditor, and viewer, each with an explicit capability set. Auditors read everything and write nothing; viewers cannot even download.
Three project roles
Lead, member, and viewer per project workspace, so client engagements and internal teams stay separated.
Invite-only onboarding
Expiring single-use invite links. No open registration, no self-service accounts.
TOTP MFA
Standard authenticator apps with recovery codes, enforceable org-wide for admins or for everyone.
Hardened session handling
Brute-force lockout, session management with instant revocation, and immediate session death on deactivation.
Last-admin protection
The system refuses to deactivate or demote the final active administrator. No lockout by accident.
Auditors can reconstruct everything.
Policy versions are immutable. Runs pin the exact version they assessed and freeze their scope at creation, forever. Hard deletes are refused while any run holds a reference: the audit trail wins. Dispositions and evidence overlay results without ever rewriting the raw verdicts, remediation decisions are recorded per change with the decider's name, and an append-only audit log is filterable in the app by administrators and auditors.
Facts your platform team will ask about.
- Multi-arch image: amd64 and arm64
- SQLite by default, Postgres via one environment variable
- 266 automated tests, including migration and tamper-rejection coverage
- Single published port; the backend is never directly exposed
- Backend ships compiled, with no source in the image
Candor is part of the security posture.
Certifications. Aegis the company does not yet hold third-party certifications of its own. The product is built to the standards it assesses, and we will publish attestations as we earn them rather than implying them now.
Catalog text. NIST CSF 2.0 ships as verbatim official text. ISO/IEC 27001, SOC 2, and GDPR ship complete-coverage control objectives paraphrased by our team, with a verbatim overlay path for deployers who hold the relevant licenses. Complete coverage is guaranteed; the wording is disclosed for what it is.
If either of these matters for your evaluation, we would rather discuss it on the first call than have you discover it after the purchase.
Bring your security team to the demo.
The architecture questions are usually the best part of the call.