Your data stays with you.
Elmar was designed with the security and regulatory expectations of public institutions in mind.
Deployment options
On-premise
In your own data centre, on your own network. Works in air-gapped environments too.
Private cloud
In an environment dedicated to you, with the domestic cloud provider of your choice.
Managed service
We take care of installation, updates, backups and monitoring.
On your existing infrastructure
SQL Server, PostgreSQL or SQLite — the same product, the same behaviour.
Permission model
Person-based permissions; system roles, in-process roles, resource-based permission scope. Even the most privileged account obtains short-lived permission with its password for in-process changes.
No hard deletes
No record is ever physically deleted. Everything deleted is kept with a timestamp and can be restored when needed.
Audit trail
Every request and every data change: who, when, which record, which value. Structured logs, end-to-end tracing with a correlation ID.
Data protection
Privacy notice and explicit consent steps, access rules for personal data, data subject requests and the right to be forgotten.
Session security
Tokens only in HttpOnly cookies, rate limits and account lockout, password policy, viewing and ending open sessions.
File security
File type and size rules; every file is served only to someone authorised to see it, after their permission is checked.
Let's digitise your processes together.
Let us show you your most complex process running in Elmar — in a 45-minute demo built on your own regulations, documents and approval chain.