The Sovereign Stack
The Stack We Built for Ourselves.
Every tool below replaced a SaaS subscription. We built them, we own them, we run them. This is what digital sovereignty looks like in practice.
SaaS Platforms
Full platforms we built to replace commercial SaaS
Sanctum Core
Bespoke ERP/CRM/MSP platform that replaced five SaaS subscriptions with a single sovereign system. Ticketing, invoicing, KB, time tracking, and project management — all under our roof.
Available as a managed deployment
- Multi-tenant ticketing & workflow engine
- Invoice & billing with Xero bridge
- Knowledge base / wiki system
- Time tracking & project management
- MCP server for AI agent integration
Digital Sanctum Audit
Public website audit platform delivering scored reports across security, performance, SEO, and compliance. The engine behind our audit service — now available as a standalone tool.
Available as a managed deployment
- Automated security & compliance scoring
- SEO and performance audit
- PDF report generation
- Public self-service audit portal
- Integrates with Sanctum Core ticketing
Sanctum CMS
Content management system with built-in lead management. Publish content, capture leads, and nurture prospects — all from a single sovereign platform.
Available as a managed deployment
- Content management and publishing
- Built-in lead capture forms
- Lead pipeline and nurturing
- Client-facing content portals
- Integrates with Sanctum Core
Sanctum Forms
Sovereign form infrastructure for templates, deployed instances, embeddable public forms, OIDC respondent journeys, autosaved response workspaces, Notify/webhook dispatch, Core links, exports, and MCP operations.
Available as a managed deployment
- Template-to-instance deployment model
- Embeddable <sanctum-form> web component and hosted /f/:slug pages
- OIDC-gated respondent flows with public, optional, and required modes
- Autosaved response workspaces with invitation URLs and event history
- Notify, webhook, Core link, export, and MCP submission workflows
Sanctum Flow
BPMN process execution engine. Define, execute, and monitor business processes with a visual editor, step-based state machine, and append-only audit trail.
Available as a managed deployment
- BPMN visual process editor (bpmn-js)
- Step-based execution engine with lifecycle tracking
- Append-only audit event log
- MCP server for AI agent integration
- SLA breach scheduling and alerts
Sanctum Mock
UI mockup and annotation tool. Create, share, and annotate interactive mockups with a rich code sandbox. Dual package: SPA + Web Component library.
Available as a managed deployment
- Rich text/code/JSON/JSX sandbox editors
- HTML + CSS preview with live rendering
- Image mockup upload with annotation
- Web Component library for embedding mockups
- Export and share via unique URLs
Sanctum Hive
CMS instance manager — provisions, manages, and monitors Sanctum 11ty CMS instances via web UI. Replaces 12 manual SSH steps with a single dashboard.
Available as a managed deployment
- One-click CMS instance provisioning
- DNS, Apache vhost, and SSL cert management
- Instance health monitoring and log viewer
- PM2 process lifecycle management
- Full instance teardown with cleanup
Internal Tools
Purpose-built tools powering our daily operations
Sanctum Visual
Centralised design system and brand asset portal. Every logo, color token, and typography rule for all Digital Sanctum properties — versioned, accessible, sovereign.
Internal tool · adaptable for client work
- Brand token library (colors, typography, spacing)
- Logo & asset downloads in all formats
- Usage guidelines with do/don't examples
- Eleventy-powered static deployment
Digital Sanctum Website
Our own marketing site — dark sovereign brand, data-driven service pages, Pagefind search, SEO-optimised blog clusters. The site you are looking at right now.
Internal tool · adaptable for client work
- Data-driven service landing pages
- Blog series/cluster SEO architecture
- Pagefind static search integration
- Fully static Eleventy + Tailwind build
Sanctum Vault
Secure credential and secret management for infrastructure, API keys, and service accounts. Sovereign secrets — never stored on third-party platforms.
Internal tool · adaptable for client work
- Encrypted credential storage
- API key and secret management
- Service account provisioning
- Role-based access control
- Zero third-party dependency
Sanctum Monitor
Uptime and availability monitoring for all Digital Sanctum services and client infrastructure. Real-time status, alerts, and incident tracking — sovereign observability.
Internal tool · adaptable for client work
- Real-time uptime monitoring
- Multi-service status dashboard
- Alert and incident tracking
- Public and private status pages
- Sovereign infrastructure — self-hosted
Sanctum Router
AI model routing service. Unified API for DeepSeek, OpenRouter, and OpenCode models with intelligent routing, rate-limiting, and load balancing.
Internal tool · adaptable for client work
- Multi-provider AI model routing
- Unified OpenAI-compatible API
- Rate limiting and load balancing
- Model catalogue with 50+ models
- MCP server for agent integration
Sanctum Chat
An operator-governed AI workforce. Delegate an outcome, approve the plan, and let accountable leads coordinate specialists, review, and delivery.
Internal tool · adaptable for client work
- Outcome delegation to accountable AI leads
- Plan approval before specialist execution
- Mission Control for progress, budgets, and interventions
- Independent review before final delivery
- Subscription-backed model routing with zero API spend by default
Sanctum Compose
Create structured operational knowledge and publish selected compositions through a controlled, immutable snapshot contract.
Available for guided implementation
- Six typed operational-knowledge primitives
- Separate editable source and publication boundaries
- Deterministic snapshot integrity metadata
- Explicit supersession and revocation semantics
R&D Pipeline
Experimental and internal-only systems
Sovereign AI Agent
Private RAG pipeline and knowledge agent trained on internal documentation. Deployed on-premise with zero third-party data leakage — sovereign intelligence.
Research prototype
- Private RAG over internal documentation
- On-premise deployment (no data leakage)
- MCP tool integration with Sanctum Core
- Multi-agent orchestration pipeline
We build these tools for clients too.
Every product on this page started as a problem we solved for ourselves. Let's discuss building your sovereign stack.