BlueWhale Stack lets national and state governments run cloud, on-prem and hybrid estates from one control plane inside their own borders. The Government Edition — generally available today — deploys fully air-gapped with an offline update channel, FIPS-validated cryptography, a WORM-backed audit log, always-on privileged access management and in-region AI, so residency and accreditation evidence are properties of the architecture.
- Air-gapped
- Deployment class with offline updates and no call-home
- FIPS
- Validated cryptography throughout
- WORM
- Immutable, append-only audit log
- In-region
- Whale AI on local models only
The regimes, and the control that answers each
| Regime | What it demands | The control that answers it |
|---|---|---|
| National data-residency law | Data, inventory and audit records stay inside the border, provably | In-country deployment classes; residency enforced per resource and evidenced from the audit log |
| Security accreditation (FedRAMP / IRAP / StateRAMP-style) | Control evidence assembled to an accreditation framework | Compliance pack export from the WORM-backed audit trail; FIPS-validated crypto |
| Air-gap mandates for classified estates | No outbound connectivity, controlled update path | Air-gapped deployment class with signed offline update bundles |
| Privileged-access rules | Every administrative session attributable and reviewable | PAM always-on with session recording; MFA mandatory on every role |
What Government teams get
- Deploy fully air-gapped: signed offline update bundles, no outbound connectivity, no call-home
- Keep data in-country — residency is enforced per resource and evidenced from the audit log
- Harden access with always-on PAM, session recording and MFA mandatory on every role
- Run Whale AI on in-region models only, so prompts and documents never leave the jurisdiction
- Connect sovereign clouds — AWS GovCloud, Azure Government, Google Distributed Cloud and national clouds — through the same connectors
- Export compliance packs for FedRAMP-, IRAP- and StateRAMP-style accreditation from the WORM-backed trail
Use cases
Sovereign, air-gapped governance across agencies
Run an air-gapped Government Edition deployment with no outbound connectivity and an offline update channel, unifying inventory, identity and governance across agencies through a single control plane — directorates segregated, policy central. Modules: Sovereign Operations, Identity & Access, Inventory & Discovery.
In-country data residency with in-region AI
Pin workloads, inventory and audit records to an in-country region, with Whale AI Abyss on in-region models and no call-home — intelligence that never leaves the jurisdiction. Modules: Inventory & Discovery, Whale AI.
Hardened privileged access
PAM is always on with session recording, MFA is mandatory on every role, and identity federation maps your directory to platform roles — privileged access is provably controlled. Modules: Identity & Access, Whale ITSM.
Accreditation evidence on demand
Every action lands in a WORM-backed audit log; compliance pack export assembles the evidence for FedRAMP / IRAP / StateRAMP-style accreditation, with ITSM change control (P0–P4 SLAs) behind it. Modules: Cloud Audit & Evidence, Whale ITSM.
Delivered engagement — Defence & Interior ministries, Middle East
Two ministries with disconnected, air-gapped estates across many directorates deployed the Government Edition fully in-country, put every directorate under one security baseline and central policy, and began answering audit queries from a system of record in minutes.
- Air-gapped
- Every sensitive estate
- 1
- Security baseline, all directorates
- Minutes
- Audit query response
“An audit query used to take days, directorate by directorate. It is now answered from one system of record in minutes — and the residency and segregation evidence is in the architecture itself.”
Procurement, hosting and integration questions
How is the platform procured for government?
Through tender or empanelment on 3–5 year fixed-bid terms, directly or via an accredited implementation partner. The Government Edition is priced as the Enterprise base plus the sovereignty layer.
Where does it run?
On sovereign on-prem infrastructure, in a private government cloud, or at government edge sites — fully air-gapped where required. Sovereign hyperscaler regions connect through the same connectors.
Does Whale AI need internet access?
No. The Government Edition runs Whale AI Abyss on in-region models inside the perimeter with zero external calls.
Platform certifications
ISO/IEC 27001:2022, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701 and ISO 22301, independently audited by accredited bodies; a CSA STAR Level 1 self-assessment, a GDPR compliance assessment and a SOC 2 Type II readiness assessment. Certificates and verification numbers are in the Trust Center.