CP82 SOVEREIGN DATA
Sovereign data fusion & decision platform

Integrate. Model. Decide. CP82.

A sovereign data-integration and decision platform that runs entirely inside your own perimeter — single host, sovereign cloud, or fully air-gapped. Connector agents fuse your databases, files and historians into one governed ontology of real business objects, so your operators can search, pivot and act on the truth — with full provenance and not a single byte leaving your network.

1 outbound URL · 443 only Ed25519-signed sync jobs Air-gap capable · Airlock import-only RLS multi-tenant by design
Vessel Site Person Sensor Txn Cargo Route
1 agent per source network 0 inbound firewall rules 443 single outbound port Every dataset versioned & immutable Full lineage, source to decision Sovereign by design
How it works

One agent per source network. One outbound channel. Total command of your data.

CP82 reaches data no SaaS platform can touch. A single static connector agent sits beside your source systems — deep inside networks that allow no inbound access — and holds one encrypted, outbound-only connection to the control plane. Every sync job is cryptographically signed; source credentials never leave the agent host.

Your sources

ERP databases, file shares, REST APIs, message queues and OT historians. Connector agents extract on-site and stream versioned, resumable segments back over the same channel.

credentials stay on-site · extraction runs locally

Control plane

The governed centre of your estate — datasets, pipelines and schedules declared as code; every sync order signed, every state change recorded, drift reported the moment it appears.

pipelines-as-code · lineage · full audit trail
Capabilities across the platform

Everything you need to fuse, govern and act on your data.

Integrate

Connector agents pull from JDBC databases, files, APIs, queues and historians — landing data as versioned, immutable datasets with manifests, checksums and resumable upload.

Transform

Pipelines as code — SQL first, Python second — with full lineage: every dataset version records exactly which inputs and which transform version produced it.

Model

The ontology maps datasets onto object types, properties and links — Person, Vessel, Site, Transaction, Sensor — with object- and property-level policy and classification markings.

Analyse

Object explorer, graph view, map and time-series — search, filter and pivot across links, save investigations, and build dashboards over ontology queries.

Act

Actions defined on object types — flag, assign, annotate, or kick off writeback through an agent — with mandatory audit and approval workflows on every change.

Govern

Purpose-based access requests, classification markings and row-level tenancy from day one — every grant scoped, time-bound and recorded.

Headline · The ontology

Tables become objects. Objects become decisions.

Raw tables answer queries; an ontology answers questions. CP82 maps your fused datasets onto the real things your operation runs on — and every property traces back through lineage to the source row, the pipeline version and the sync job that delivered it. When an operator acts, the decision carries its evidence with it.

Search, pivot and traverse links across every governed object you're cleared to see
Property-level access policy and classification markings, enforced in the database
Provenance on every value — auditor-defensible from decision back to source
project82.local / #/investigations/harbour-watch

INVESTIGATION · HARBOUR WATCH 3 FLAGGED OBJECTS

Vessel · MV Kestrel7 links · last AIS 14 min agoFLAGGED
Transaction · TXN-88412links Kestrel ▸ Meridex LtdLINKED
Site · Berth 12, Felixstowe3 sensor feeds · liveMONITORED
Person · D. Okaforconsignee · 2 prior flagsFLAGGED
Provenanceais-feed v214 ▸ pipeline vessel-enrich@1.8 ▸ sync job 4471 ✓ signed
project82.local / #/assistant
OperatorWhich flagged vessels touched Berth 12 in the last 30 days, and who were the consignees?
✦ Assistant · grounded on your ontologyTwo flagged vessels called at Berth 12 since 21 June: MV Kestrel (3 calls, consignee D. Okafor) and MV Aldora (1 call, consignee Meridex Ltd). Both consignees share Transaction TXN-88412. Sources: ais-feed v214, customs-manifest v87 — full provenance attached.
Assurance log2 ontology queries · 0 writes · scope: operator clearance · logged 09:41:07
Headline · Sovereign AI

An analyst that knows your ontology — and never leaves the building.

Every model runs on your own infrastructure, grounded strictly on the objects the caller is cleared to see. Answers are computed from the ontology, never invented; every query lands in the assurance log; and a human confirms every write.

On-prem models — none, local or hosted, at your choice; prompts never leave the enclave
Role-aware grounding: the assistant sees exactly what you see, nothing more
Every tool call and proposal audited; writes gated on human approval
Solutions

One platform. Wherever the data cannot leave.

CP82 is built for organisations whose data is too sensitive, too regulated or too operational for the SaaS default. The same platform, tuned to the mission.

Government & public sector

Fuse departmental systems into one governed model inside your own estate — classification markings, purpose-based access and auditor-defensible provenance on every value.

Critical infrastructure & OT

Connector agents sit beside historians and SCADA networks that allow no inbound access, streaming versioned data out over one outbound channel — the enclave never opens a door.

Defence & border security

Air-gapped deployments with Airlock-only imports. Link vessels, cargo, sites and people across feeds; rank what matters; act with mandatory approval workflows.

Financial services

Investigate transactions, counterparties and accounts on one ontology with full lineage — evidence that stands up to your regulator, produced inside your perimeter.

Sovereign operations

Built for the enclave, not adapted to it.

Self-provisioning connectors

Pre-stamped installers enrol on first run — keypair generated on-site, token cleared, identity signed. No manual certificate ceremony.

Signed work orders

Every sync job and writeback is Ed25519-signed and addressed to one agent. A compromised control plane still cannot redirect your data to an unpinned destination.

The Airlock

In air-gapped installs, one architecturally one-way bridge imports signed bundles — reference data, model artefacts, platform updates. Nothing flows out. Ever.

Resources

Read the thinking behind the platform.

CP82

See your operation as one model. Act on it with proof.

Sovereign data fusion, a governed ontology and on-prem AI — single host, one port, entirely under your control.