Two questions decide this, and they are not the same question: where your files sit, and where the AI model that reads them runs. On the standard service the answers are Canada and outside Canada. If both have to be Canada, we run PRISM for you on dedicated Canadian hardware. If the work must never leave your building, we install it there.
What people call data sovereignty is really two separate questions: where your documents live, and where the computer that reads them is. We answer both, for each of the three ways you can run PRISM, and we don't blur them together to make the answer sound better.
Described plainly, with what is true of each. Only the first one is something you can start on your own.
An account on presaga.ca. Nothing to install, nothing to procure, nothing to schedule. This is what almost everyone uses, and it's the tier every page on this site describes.
The same PRISM, run for you on dedicated hardware in Canada, separate from the standard service. This is the tier that answers “the processing has to happen in the country, not just the storage.”
PRISM installed on hardware you own, on your own network, run by your people. For work that must never leave your walls — and for teams whose answer to “where does it go” has to be “nowhere.”
No uptime figure, no service-level table, no compliance badge, and no price for tiers two and three. We don't have the first three, and a marketing page is not the place to invent them. What we can do is describe exactly how the system handles your data, put your security team in front of the source, and answer specifics in writing.
Specifics, not adjectives. The full detail is on the security page.
The material you submit, the reports PRISM produces, report-chat history and uploaded files are encrypted with AES (via the Fernet standard) before they're written to the database or to disk. Backups are AES-256 encrypted. Passwords are hashed; your two-factor secret is encrypted too.
All traffic runs over HTTPS with HSTS enforced. On our infrastructure the database sits on the same machine over a loopback connection, so your content never crosses a network in the clear.
Application logs record operational detail — identifiers, timings, errors — not the content of your submissions or your reports. Secrets are redacted before anything is written.
Delete a briefing, a project, or your entire account from your settings. Account deletion is confirmed with your password — and your two-factor code if you have turned it on — then removes your content and uploaded files. Financial records are anonymized and kept only as accounting requires.
Presaga isn't operated as a public open-source project. For enterprise and public-sector procurement, source-code review can be arranged as part of a security assessment — so the people who have to sign off can read how your data is handled rather than trust a claim on a page.
Bring the clause, the questionnaire or the audit you have to satisfy. We'd rather answer specifics than wave a badge, and we'll tell you plainly where the answer is no.
Every account includes a branded portal at a subdomain you choose — yourorganization.presaga.ca — carrying your logo, your title and your own description. It's where clients, council or colleagues read the work without an account on the main app.
The clause, the audit, the ministry, the client's security team — whatever is driving the question. If the standard service already meets it, we'll say so rather than sell you a deployment you don't need. For tiers two and three there's no price list: the scope is the price.
