A sovereign workspace for aerospace, defence and critical infrastructure
Avigation Cloud is the Maximum Security variant of Samspill Cloud: one sign-in for files, mail, calendar, meetings, ERP and an AI assistant. Built on open source and operated by Avigation on dedicated servers in Europe.
What is Avigation Cloud?
What Avigation Cloud is
A controlled workspace where identity, access and data sit under one security envelope. Every service is open source that Avigation operates and can adapt itself, and access is decided on the server on a need-to-know basis.
Available today in Workspace
These verified services are operational today behind single sign-on.
One sign-in
Keycloak with OpenID Connect gives one sign-in to Workspace, Nextcloud, mail, Odoo and LUA.
Avigation Workspace
Files, mail, calendar, Talk and tasks in one place, with details and actions without switching apps.
Files and collaboration
Nextcloud for files, sharing, calendar, contacts and Talk meetings.
An own mail service on Stalwart, with IMAP and SMTP for standard mail clients, also read in Workspace.
ERP and projects
Odoo for finance, projects and tasks, with the same sign-in.
LUA AI assistant
LUA in Workspace answers with sources and can search the web. LUA uses both local and external models.
Avigation Monitor
A situational picture behind the same sign-in, with ship traffic (AIS) and satellite fire detections.
Collabora Online (ODF/Office)
Beta: in-browser document editing
Collabora Online provides document editing directly in Nextcloud Files. DOCX editing, saving and a new file version are verified. Files stay in Avigation Cloud.
Beta: Workspace Office for administrators
Collabora Online opens your own DOCX files inside Workspace for administrators (ADMIN_PREVIEW). DOCX editing, saving and a new Nextcloud version are verified. XLSX, PPTX, ODT and read-only, locked and shared-file checks remain pending.
Identity and Entitlement
Secure identity and access
Access is governed centrally in Keycloak and enforced on the server by each service. Sign-ins are logged in Keycloak, and administrative changes in Nextcloud are written to a separate audit log.
Open-source collaboration suite
Open-source collaboration
Nextcloud, Stalwart and Odoo cover files, meetings, mail and business flow, all behind the same sign-in.
Beta: in-browser document editing
Collabora Online provides document editing directly in Nextcloud Files. DOCX editing, saving and a new file version are verified. Files stay in Avigation Cloud.
Beta: Workspace Office for administrators
Collabora Online opens your own DOCX files inside Workspace for administrators (ADMIN_PREVIEW). DOCX editing, saving and a new Nextcloud version are verified. XLSX, PPTX, ODT and read-only, locked and shared-file checks remain pending.
LUA AI
LUA: AI orchestration, local-first by design
LUA routes between local models on own hardware and external models where needed. Today, part of the conversations go to external model providers. The target is local open models by default, own tools via MCP and answers from approved knowledge sources.
LUA: AI orchestration, local-first by design
LUA routes between local models on own hardware and external models where needed. Today, part of the conversations go to external model providers. The target is local open models by default, own tools via MCP and answers from approved knowledge sources.
Avigation Monitor
Avigation Monitor
A situational picture that brings together open data sources, such as ship traffic (AIS) and satellite fire detections, behind the same sign-in. More sources are added over time.
Engineering integrations
Engineering platform: planned
Planned: commercial engineering tools such as 3DEXPERIENCE and ANSYS as isolated services behind the same sign-in, AS9100 quality management in Odoo, and over time our own physics-based AI models (A3-LEM).
Assurance & sovereignty roadmap
Our planned path for Norwegian hosting, security assurance, and cryptographic hardening.
Norwegian operating zone
The target is to move identity, keys, build pipelines and backups into dedicated Norwegian operating environments. Today the platform runs on dedicated servers in Finland (EU), and it is designed for encrypted off-site backups to a Norwegian storage service.
Path to NSM
The target is a formal approval path with NSM under the Norwegian Security Act: defined system boundaries, use cases and preliminary dialogue. No approval exists today.
ISO/IEC 27001
The target is an information security management system following ISO/IEC 27001, with a risk register and controls. The platform is not certified today.
Hardware security keys
The target is mandatory two-factor sign-in with hardware security keys (FIDO2/WebAuthn) for all users, and planned federation with customers' own identity systems (SAML 2.0). Keycloak supports both; neither is required today.
Planned: tamper-evident audit logs
The target is audit logs written to write-once (WORM) storage, so that no administrator can change them afterwards. Today sign-in logs are kept for 30 days.
Encryption and keys
The target includes encryption of databases and vector stores with keys held in hardware security modules (HSM), and end-to-end encryption where it fits. This is not in place today; keys are managed by Avigation.
Fewer external dependencies
The target is to remove remaining external services from operations, including DNS, the mail relay and external AI models, so that the platform is not exposed to foreign legislation such as the US CLOUD Act.
Architecture & Layer Overview
Transparent distinction between services available in production today and target architecture milestones.
Identity and access
Keycloak, OpenID Connect, server-side access
Target: mandatory FIDO2, SAML federation, WORM audit log
Collaboration
Nextcloud, Stalwart
Beta: Collabora Online in Workspace for administrators (DOCX, ADMIN_PREVIEW)
ERP
Odoo
Target: AS9100 quality management
Workspace
Avigation Workspace, one place and one sign-in
Target: search and notifications across all services
AI
LUA with local and external models
Target: local-first by default, MCP tools, approved knowledge
Intelligence
Avigation Monitor with open data sources
Target: more sources in Workspace
Engineering
Not in operation
Target: 3DEXPERIENCE and ANSYS as isolated services, A3-LEM
Hosting
Dedicated servers in Finland (EU)
Target: Norwegian operating zone, encrypted backups to Norway, HSM-held keys, own build pipelines
Talk to us
Request access or a walkthrough of the platform. Avigation AS, Raufoss, Norway, company no. 932 075 962.