Sovereign Client-Environment Architecture
autonomo_soc operates under a strict Zero-Data-Ingestion boundary. The entire multi-agent pipeline is deployed inside the customer's own cloud.
Key Compliance Boundaries:
- 100% In-Tenant Runtime: Triage, Investigation, and Remediation containers run within client-owned Azure Container Apps (ACA) or local Kubernetes boundaries.
- Sovereign Database Anchors: Incident states, workflow states, and institutional memory remain inside a client-owned, encrypted Cosmos DB instance.
- Identity Key Segregation: Egress integrations poll secrets from client-owned Azure Key Vaults using secure Azure Managed Identity tokens. Credentials never transit third-party parent servers.
- No SaaS Web Console: The analyst dashboard and REST services run entirely inside client-controlled VPC virtual networks.