Deployed where you choose.
Where it runs. Galinstan installs in your own cloud account or on your own servers, and runs air-gapped if your policy requires it. Your data stays in your environment.
What it reads. The files your teams already produce. A pilot starts from those extracts.
What we are to your register. We license Galinstan annually with support, patches and calibration. None of your data reaches us, and no part of the analysis depends on us being reachable.
Upgrades. Every version is cut as a signed release: an offline bundle with a checksum for every file and a software bill of materials.
Escrow and exit. Every release is built to be deposited: source, bundle and checksums as one versioned artefact. We agree escrow and exit terms in the contract rather than pointing at a policy page.
Who does what. We follow a shared responsibility model, as cloud providers do. We are responsible for the correctness of the evidence: the regulatory parameters read from the primary text, the calculations, the reconciliations to what you report, and the signed software that produces them, each with evidence your reviewer can re-perform. You are responsible for the perimeter it runs in, the data you give it, and the decisions and submissions you make on it. Calibration and updates are shared: we supply them, and you approve and install them. Together, the two complete the steps each regulation asks for.