ARCHITECTURE & INTEGRATION MODEL
Split Deployment — France
Their data plane and our analysis plane both run in France, on separate hardware, joined only by a federated message link. PROPOSED
Their infrastructure DATA PLANE · FRANCE · THEIR HARDWARE · THEIR DPA · STATEFUL
PROPOSED | AUGUST 2026
Our infrastructure ANALYSIS PLANE · FRANCE · OUR HARDWARE · OUR IP · STATELESS
PRIVATE LINK mTLS federation WireGuard or IPsec
Gateway, 40+ frontends, ~30 data services, MySQL, object store and their own broker. Every finding, screenshot, document, PII analysis and user account lives here. PRIVATE LINK mTLS federation WireGuard or IPsec
Broker, crawler fleet, engine-service, ai-facade and Redis. It holds the tests and prompts and nothing else — no findings, no accounts, no documents.
Traefik gateway accounts-api 40+ frontends
~30 data services MySQL 8.4 object store their broker
DETAIL ON PAGE 2
← verdicts crawl jobs
our broker crawler-manager crawler × 10
crawler-manager | crawler x10 | engine-service
ai-facade Redis
DETAIL ON PAGE 3
WHERE THE LINE FALLSANALYSIS PLANE - OURSDATA PLANE - THEIRS
HoldsTests, crawler, AI promptsEvery result, document, screenshot, account
StateNone that survives a restartAll of it
Reachable byTheir broker, over the private linkTheir browsers, directly
If they leaveWe keep the IPThey keep their data
SPLIT DEPLOYMENT · FRANCE · ARCHITECTURE TEAM
BLUE = THEIR HARDWARE, THEIR DPA · AMBER = OUR HARDWARE, OUR IP