Government Software on a Platform Built for the Regulatory Load.
Government tech requires more than commercial compliance. FedRAMP Moderate / High for federal agencies. FISMA for federal data. CJIS for criminal-justice systems. StateRAMP for state/local. NIST 800-53 + 800-171 controls. Air-gapped deployment for classified or sensitive systems. Citizen-data sovereignty across jurisdictions. Aeion's government stack — Auth + Aegis + Sentinel + Governance + Files + Forms + Claw + Inbox — ships kernel-level controls, customer-managed encryption, immutable audit, and air-gapped deployment options.
What Aeion Ships for Government Specifically
Air-Gapped Enterprise Deployment
For classified or sensitive systems, Aeion deploys with no internet egress at all — AI inference runs on-prem via Ollama, vLLM, or HuggingFace TGI, updates arrive only through periodic approved-channel bundles, and no telemetry ever leaves your infrastructure.
CMK Encryption + KMS Integration
Customer-managed AES-256 keys integrate with your KMS of choice — AWS KMS, Azure Key Vault, or an on-prem HSM — so even Aeion staff can't decrypt your data without authorization, and every key rotation lands in the audit log.
Immutable Audit Log with SIEM Export
Every collection write generates its own audit row in an append-only schema with no UPDATE or DELETE permissions, exportable to Splunk Enterprise, Sentinel, Sumo Logic, or custom syslog — mapped to NIST 800-53 AU-2, AU-6, and AU-12.
Aeion Aegis — Continuity of Operations
Continuous point-in-time recovery via pgBackRest backs up to your own controlled storage — BYO S3 or on-prem — with S3 object-lock for ransomware resilience, weekly verification, and monthly compliance reports mapped to NIST 800-53 CP-9 and CP-10.
Aeion Auth — PIV/CAC + Hardware FIDO2 + Federated Identity
Native PIV/CAC smart-card sign-in — staff log in with the card they already carry (certificate chain trust against your agency CA bundle, validity checks, role assignment from the cert). SAML 2.0 + OIDC + 10 OAuth providers for federation with enterprise IdPs, plus SCIM 2.0 for automated joiner/leaver lifecycle. Hardware security keys (YubiKey, Titan, Feitian, Ledger, Nitrokey) via Bridge + WebAuthn FIDO2. TOTP MFA mandatory for privileged users. Per-role scopes. Break-glass workflow with chain-of-approval. Read Auth →
Aeion Sentinel — Continuous Monitoring
Cross-domain threat detection. Insider-threat patterns. Anomaly detection on classified-data access. CJIS audit-ready logs for criminal-justice systems. Read Sentinel →
Aeion Governance — Policy + ATO Evidence
NIST 800-53 + 800-171 control mappings with evidence lines. Policy library with version control. Risk register with treatment plans. Authorization-to-operate (ATO) packet auto-generated. Read Governance →
Citizen-Facing Services
Aeion Forms for benefit-application intake. Inbox for citizen comms (multilingual). Files for document upload with PII detection. Aegis for citizen-data retention compliance.
Compliance Framework Mappings
Concrete mappings for the regulatory load government deployments face.
Government-Specific Operational Wins
Air-Gapped Deployment
No internet egress, on-prem AI inference, and customer-controlled infrastructure end-to-end for classified or sensitive workloads.
Native PIV/CAC + WebAuthn FIDO2 Hardware Keys
Staff sign in with the smart card or hardware key they already carry — YubiKey, Titan, Feitian, Ledger, Nitrokey — via Bridge.
FedRAMP Moderate Evidence Package
A pre-built evidence set accelerates your ATO instead of starting the paperwork from zero.
CJIS Audit-Ready Logs
Criminal-justice-data access stays fully traceable for CJIS audit review.
Citizen-Data Sovereignty
Citizen data stays in your tenant and your storage bucket, never Aeion-controlled infrastructure.
Multilingual Citizen Comms
Inbox and Connect handle citizen communications natively in 30+ languages.
Forms for Benefit Applications
Structured intake with built-in PII handling and audit trail.
Aegis Citizen-Data Retention Compliance
Per-record retention policies keep citizen data compliant with jurisdiction-specific retention rules.
The Multi-Tenant Government Story
State and local agencies often run shared infrastructure across departments. Aeion's per-tenant architecture works for this.