Calderwyn
Market Briefing, Week 4707:30On-Premises
Bare metal in your data center, with the Sover Private Cloud included: provisioning, storage, data services, observability, security and a management console in one product.
Deployment Options
Serve Clients in Conversation, Not Another Super App
With Sover, a bank, wealth manager or insurer serves clients in chats with advisors, bots and AI agents, in the client’s own words, instead of a super app full of menus. It runs on infrastructure you host in your jurisdiction, under your brand and your security policy.
- One App
- Under your brand, on every device
- People and Agents
- Advisors, bots and AI agents in one chat list
- Your Jurisdiction
- Hosted where your rules require
Overview
Clients Should Not Need Ten Apps to Talk to One Firm
A family with a bank, an investment manager and an insurer often juggles a banking app, a reporting portal, email for statements and a phone number for the relationship manager. Firms answer with a super app: one login, and every service behind its own menu, screen and release cycle.
Sover offers a different model. Your firm releases one messenger under its own brand, and every service is a conversation: clients write to their relationship manager, ask an AI agent in their own words, and tap a bot’s button to get a report or start a claim. Conversations and files stay on servers you operate, in the jurisdiction your rules require.
Why Sover
A Conversation Instead of a Super App
Most firms either keep a separate app or portal for each service, or fold them into one super app. Sover turns each service into a chat that clients already know how to use.
| Separate Apps and Portals | A Super App | Sover | |
|---|---|---|---|
| How Clients Ask | A login, menus and forms for each service. | One login, with each service behind its own menus and screens. | Clients write what they need, in their own words, to an advisor, a bot or an AI agent. |
| Who Answers | Contact forms, call centers and email, apart from the app. | A help section inside the app, apart from the services. | Relationship managers, specialists, bots and AI agents in one chat list. An agent asks a person first when a request is beyond its permissions. AI Agents & Assistants |
| Adding a Service | Another app or portal for each product. | New screens in the next release of the app. | A new bot or AI agent, connected through 50+ REST methods or MCP, that answers with buttons, files and reports in the chat. Integrations & APIs |
| Where Client Data Lives | In each vendor’s systems, under each vendor’s terms. | Wherever the app and its services are hosted. | On infrastructure your firm operates in your jurisdiction, with encryption, role-based access and administrative audit logging. Security & Compliance |
| Your Brand | A different look and login for each app. | Your brand, on an app your team builds and maintains end to end. | Rebrandable apps for Windows, macOS, Linux, Android, iOS and the web, released under your name. |
Compared by approach; individual apps, platforms and settings differ, so evaluate each against your requirements.
Use Cases
Every Client Service, One Chat Away
- Messaging & Channels
Relationship Manager Chats
Clients write to their relationship manager as they would to family, with voice messages and documents, and the firm publishes market notes in its own channels.
- AI Agents & Assistants
AI Agents in Plain Language
Agents you connect through MCP or the REST API answer routine questions, work within the permissions your policy sets and ask a person before going further.
- Integrations & APIs
Service Bots with Buttons and Files
Bots your team builds on the Bot API bring balances, reports and claims from your systems into the chat, with buttons for the next step.
- Video Conferencing
Client Reviews by Video
Portfolio and planning reviews as video meetings, with call transcription and summaries from the AI assistant for the advisor to check.
- Security & Compliance
Sensitive Matters in Secret Chats
End-to-end encrypted secret chats for the most private conversations, alongside mandatory two-factor authentication and device and session control.
- Administration
Staff Access and Audit
A back-office console for users, roles, devices and sessions, with administrative audit logging and one-way sync from Microsoft Active Directory.
One Family, One Firm, Every Service in a Chat
Illustrative chats between a fictional family and a fictional multi-family office. The services shown are bots, agents and channels a firm could build on Sover.
Calderwyn Family Office, the Marchetti family, the staff and all figures are fictional and illustrative. Nothing here is financial, tax, investment or insurance advice.
Deployment
Client Data in Your Jurisdiction, under Your Policy
Sover is user-hosted. It runs in your own data center or with a trusted in-country provider you select, and the hosting operator, isolation and region are agreed for each project.
Client conversations, files and reports are stored on infrastructure your firm operates, behind TLS 1.2 or higher, encryption at rest, mandatory two-factor authentication, role-based access and administrative audit logging. Together with your integrations and procedures, the deployment is designed to meet local data-protection requirements.
Your Kubernetes Cluster
Sover on a Kubernetes cluster your team already operates. The Sover Private Cloud stays included; this setup takes a custom SLA.
Your Virtual Machines
Sover on the virtual machines you already run, including legacy hypervisors such as VMware ESXi.
Included
What Is Included, and Where the Limits Are
Included
-
Your hosting. Three deployment options in one model, with the Sover Private Cloud included.
-
Your policy. Mandatory two-factor authentication, role-based access, device and session management, and administrative audit logging.
-
Your encryption setup. TLS 1.2 or higher with your own trust store, encryption at rest, session-key and file-key payload encryption, and end-to-end encrypted secret chats.
-
Your services. The Bot API with 50+ REST methods and a Python client library, and MCP for the AI agents you approve.
-
Your brand. Rebrandable apps for Windows, macOS, Linux, Android, iOS and the web; source-code licensing by agreement.
-
Your support. Standard Support under the Sover SLA, with Premier Support available.
Stated Limits
-
Hosting is not compliance. Sover’s controls support your compliance program. Your firm assesses configuration, access, integrations, devices and procedures against its obligations; Sover holds no formal security certification.
-
The services are yours to build. Sover is the communications platform. Account data, reports, payments, claims and advice come from your systems and your people, through the bots and agents you build.
-
AI services follow the data path you choose. An agent connected to an external AI service sends it what the agent processes. Choose models and hosting with your data-protection requirements in mind.
-
Audit logging covers administration. It records administrative actions; it is not an archive of client communications or a legal-hold system, so scope recordkeeping separately.
-
End-to-end means secret chats. Standard chats use transit, at-rest and payload encryption; the end-to-end claim covers secret chats.
-
Mobile push uses platform services. Push notifications to phones are delivered through the Apple, Google or Huawei notification services. Review each external dependency in your design.
More Industries
The Same Platform in Other Sectors
The deployment model that serves a financial firm also serves the sectors below.
Government Agencies
Ministries and agencies on their own instances, working together through federation.
Learn MoreE-Government Services
Official channels and service bots a national operator builds on the Bot API, which citizens reach in the messenger they already use.
Learn MoreSovereign Social Media
Shared instances a national operator runs on its own infrastructure for citizens and small businesses.
Learn MoreLaw Enforcement
A national police force can run a high-security instance of its own and open only the exchanges it approves.
Learn MoreFirst Responders & Alerts
Broadcast channels and operational bot notifications for the teams that respond, with IREX alarm notifications where IREX runs.
Learn MoreHealthcare
Messaging and video meetings for clinical and administrative teams, hosted where the organization decides.
Learn MoreCritical Infrastructure
Separately hosted operators keep their own instances and connect them where they need controlled communication.
Learn MoreQuestions, or Ready for a Briefing?
Contact Sales
Tell us about your firm and your clients, and we will arrange a briefing for your team.
Can a financial firm use Sover instead of building a super app?
Yes, as an approach. Your firm releases Sover under its own brand and adds each service as a conversation: staff in chats and channels, bots built on the Bot API, and AI agents connected through MCP or the REST API. The services themselves, such as balances, reports or claims, are integrations your team builds and operates.
How is our clients’ personal data handled?
Sover is user-hosted, so client conversations and files are stored on infrastructure your firm operates, in the jurisdiction you choose, with encryption in transit and at rest, mandatory two-factor authentication, role-based access and administrative audit logging. The deployment, integrations and procedures are designed together to meet local data-protection requirements; hosting alone does not establish compliance.
Can AI agents act for clients without a person’s approval?
Agents act within the permissions your security policy grants them and ask first beyond them. Decide which actions an agent may take on its own, and which need an advisor’s or the client’s approval, before you enable it.
Who is Sover designed for?
Sover is designed for governments, regulated organizations, and enterprises that need control over their communications infrastructure and data. It brings team conversations, calls, and collaboration into an environment the organization hosts.
Do we have to move our communications to a public cloud?
No. Sover is user-hosted: it runs on infrastructure your organization controls, whether your own servers with the Sover Private Cloud, your Kubernetes cluster, or your virtual machines, so the hosting environment can be selected for your organization's requirements.
Does hosting Sover on-premises automatically meet our compliance obligations?
No. Hosting is one part of a compliance program. Your organization must assess configuration, access, integrations, devices, data flows, and operating procedures against its obligations. Sover's controls can support that work; hosting alone does not establish compliance.
Does Sover provide administrative audit logging?
Yes. Administrative audit logging is part of Sover's control set. Agree the events you need to record and the access, retention, and export requirements; audit logging alone does not establish a complete forensic or legal-hold system.
Does Sover offer end-to-end encryption?
Yes. Sover offers end-to-end encrypted secret chats for sensitive private conversations. Standard chats have a different security model, including transport, at-rest, and payload-encryption controls; the secret-chat claim should not be extended to every conversation or integration.
Does on-premises deployment mean there are no external dependencies?
Not automatically. Push services, identity providers, calendar systems, AI services, and other integrations can introduce external dependencies. Review the actual data flows and enabled services when designing a restricted-network deployment.
Can Sover use our organization's branding?
Yes. Sover is rebrandable, so an organization can discuss a deployment under its own identity. The branding scope, application distribution, and delivery responsibilities are agreed for the project.
What support and service levels are included?
Standard Support is included in the subscription or license, in accordance with the agreement: online tickets, email and messenger support, business-day coverage, and 24×5 weekday coverage, with initial response from four hours for urgent issues. Premier Support is available for an additional fee and adds 24×7 deployment health monitoring, one-hour and two-hour initial response for urgent and high-impact issues, weekend coverage for those escalations, and a senior support team. The full terms are in the Sover SLA.