Skip to content

Public administration

Sovereignty you can point an auditor at

Enclessa gives public bodies a collaboration platform hosted in the European Union, with end-to-end encrypted direct messages, an audit log covering administrative action, retention rules that can be set per organisation, and a complete data export whenever it is asked for. The architecture, the data model and the OpenAPI surface are published, so a reviewer can check how it works rather than take it on trust, and the encryption is MLS per RFC 9420 — an IETF standard — rather than a scheme of our own. Where a mandate requires a deployment of your own, the Enterprise plan provides a dedicated one in a region you name, still operated by us.

Open betaThe platform is being built in the open, so parts of it are not there yet, behaviour changes between releases, and no availability figure is committed while it is in beta. What is still being built.

At a glance

Hosting
European Union, single region
Published
Architecture, data model and OpenAPI surface
Audit
Administrative action logged per organisation
Retention
Configurable per organisation, with legal hold
Dedicated deployment
On Enterprise, in a region you name, run by us

The constraints this sector actually has

The data may not leave the jurisdiction

Procurement rules and, increasingly, political direction require that citizen data stays under European law and outside the reach of foreign disclosure regimes. That is a question about where the servers are and who ultimately controls them, not about a data-processing addendum.

Somebody will ask who saw what

An audit is not a hypothetical. What is needed is a record of administrative action — who changed a permission, who exported data, who removed an account — that exists whether or not anybody remembered to turn it on.

Retention is a duty in both directions

Some records have to be kept for years and some have to be gone. A platform that only knows how to keep things forever fails the second duty as surely as it satisfies the first.

The exit has to be real

A procurement that cannot describe how it ends is a procurement that has not been thought through. Reversibility is a requirement, and it means an export in a format somebody else can read.

What Enclessa does about them

What that looks like on a working day

Questions

Public sector: common questions

Is Enclessa hosted in the European Union?

Yes. The hosted service runs in a single European Union region, and the seller is established in Germany. There is no regional data residency choice within the shared service; where a specific location is mandated, the Enterprise plan provides a dedicated deployment in a region you name, which we operate.

Can a public body run Enclessa on its own infrastructure?

No. Enclessa is a hosted service and the software is not distributed to anybody, so there is nothing to install. Where a mandate requires a deployment of its own, a public body buys one on the Enterprise plan: dedicated infrastructure in a region it names, operated and updated by us rather than by its own staff.

Does Enclessa keep an audit log?

Yes. Administrative action is written to an audit log scoped to the organisation, and in the People module every document download is recorded with who took it and when.

Encrypted collaboration, hosted in Europe.

Create a workspace in a couple of minutes. It is yours at your-team.enclessa.app, hosted in the European Union, with encrypted direct messages from the first one you send.

Open beta. Free plan, no payment card to start.