Enterprise
Deployed where your data is allowed to live.
Three certified deployment profiles, strict tenant isolation, audited support access and an independent backup boundary. EDS is one product that does not require any other ZEMERC application to operate.
Deployment
Three profiles, one product.
ZEMERC cloud
Managed multi-tenant service. Organisation-scoped row-level security, tenant-scoped storage and per-organisation retention.
Customer cloud
Deployed into your own cloud account where contract or residency requires it, with the same code and the same isolation model.
On-premises
Installed and operated inside your estate, including the processing worker, with licence enforcement intact.
Security
Isolation is a database property, not a promise.
| Control | How it works |
|---|---|
| Tenant isolation | Row-level security enabled and forced on every tenant-scoped table; the application role cannot bypass it |
| Storage | Private bucket, tenant-scoped object keys, short-lived server-issued signed URLs only |
| Identity | Authentication through the identity provider; authority from EDS tables only |
| Support access | Time-boxed, audited, read-only elevation that the customer can see and revoke |
| Audit | Append-only events including denials; no application role can update or delete them |
| Secrets | External secrets manager with scoped short-lived access; nothing in hosting environment variables |
| Backup | Independent per-application backup boundary with tested restoration |
Status of these controls
Commercial
Procurement answers, up front.
Entitlements
Seats, projects, AI processing allowance, storage and feature entitlements enforced in-product.
Usage accounting
Metered pages processed, AI units, storage and documents produced, attributable per project.
Data export
Complete machine-readable export per project: documents, registers, requirements, revisions, approvals and audit.
Integration
P6 imports, register import and export, document repository adapters and enterprise APIs.
Security review pack available.
Architecture, data model, isolation design, acceptance criteria and the open decision register can be shared under NDA.