European data sovereignty, by design.
Nebulas is built for EU sovereignty. RGPD-native architecture, EU data residency by default, on-premise deployment, Keycloak identity, and BYOLLM on every tier. No US SaaS dependency.
Sovereignty built into every layer
RGPD-Native
Data export, deletion, processing records, and consent management built into the architecture from day one.
EU Data Residency
All data stored in EU data centers by default. No cross-border transfers unless you explicitly configure them.
On-Premise Available
Full Helm/K8s deployment on your own infrastructure. Air-gapped mode for maximum isolation.
Keycloak SSO
SAML/OIDC federation with per-org realms and SCIM provisioning. No US-based auth dependency.
SecNumCloud Path
Deploy on SecNumCloud-certified providers (IONOS, OVHcloud, Outscale, S3NS) for highest French security standards.
61%
of Western European CIOs plan to increase reliance on local cloud/AI providers (Gartner 2025).
On-Premise Deployment
Full platform on your infrastructure. Helm/K8s, air-gapped mode, GitOps updates.
Helm/K8s Deployment
Full containerized deployment via Helm charts on Kubernetes or OpenShift. Same platform, same features, your infrastructure.
Air-Gapped Mode
Complete network isolation. No external API calls. All AI inference runs locally via Ollama. Nothing leaves your perimeter.
Infrastructure Requirements
Production: 3+ nodes (8 CPU, 32 GB RAM each). Evaluation: single node (4 CPU, 16 GB RAM). GPU optional but recommended for local inference.
GitOps Updates
New versions published to private Helm registry. ArgoCD or your preferred GitOps tool detects updates. You control rollout timing.
Bring Your Own LLM
Connect any major LLM provider, run local models with Ollama, or use multi-provider routing. Available on all tiers.
Sovereign tier: BYOLLM is mandatory on the Sovereign plan. Run Ollama for fully local inference — no data leaves your network. Multi-provider routing lets you use different models for different use cases.
RGPD Compliance
Data protection built into the architecture, not bolted on after launch.
Processing records built into project settings. Legal basis tracked per knowledge base.
RAG architecture queries only relevant document chunks. BYOLLM means prompts stay in your control.
One-click data deletion across knowledge bases, vector stores, and data tables. Audit trail confirms removal.
Full data export in JSON/CSV. Knowledge bases, data tables, chat history — all exportable at any time.
Pre-built DPIA templates for common AI use cases. On-premise deployment eliminates most cross-border transfer risks.
BYOLLM: you control the processor relationship. Nebulas DPA covers platform processing. No hidden sub-processors.
Keycloak Universal Identity
Enterprise identity management without US SaaS dependency.
SAML/OIDC Federation
Connect to any enterprise identity provider. Azure AD, Okta, Google Workspace, or your own LDAP directory.
Per-Org Realms
Each organization gets an isolated Keycloak realm. User data, sessions, and policies are fully separated.
SCIM Provisioning
Automated user lifecycle management. Create, update, and deactivate users from your identity provider.
No US Auth Dependency
Keycloak replaces Auth0. Self-hosted, open-source, EU-operable. No mandatory US SaaS for authentication.
Key EU regulations Nebulas helps you address
October 2024
NIS2 Directive
Cybersecurity requirements for essential and important entities across the EU. Nebulas supports compliant deployment configurations.
August 2025
EU AI Act
Risk-based regulation of AI systems. Nebulas provides transparency, auditability, and human oversight controls.
In effect
GDPR / Schrems II
Data protection and cross-border transfer restrictions. Nebulas keeps data in the EU with on-premise and BYOLLM options.
Sovereign Tier
From €10,000/mo
On-premise K8s/Helm deployment, Keycloak identity, air-gapped mode, BYOLLM mandatory (Ollama), SecNumCloud path, full audit logging, and data residency control. Unlimited seats.
Talk to SalesFrequently Asked Questions
Deploy on your terms
Start with EU-hosted SaaS. Scale to on-premise when you need full control. Same platform, same features.