Flagship · IT & AI Box
IT & AI Box: Nextcloud-Powered Sovereign Workspace
Sivatech builds controlled infrastructure environments that combine Nextcloud, private AI, secure collaboration, knowledge search, automation workflows, monitoring, backup and IT/OT integration.
01Why organizations need it
AI is easy to demo. Controlled AI is infrastructure.
Most organizations don't lack AI ideas — they lack an environment where AI can work on real company knowledge without losing control of it.
Public-cloud AI exposes internal knowledge
Contracts, calculations and operational know-how should not train someone else's model or sit in a jurisdiction you can't audit. Private AI keeps the knowledge — and the leverage — inside.
Knowledge is scattered and unsearchable
Years of documents across file servers, inboxes and personal folders. Nobody finds anything, onboarding is slow, and AI can't help with knowledge it can't reach.
Operations and IT don't talk
Machines, buildings and sensors produce data that never reaches the systems where decisions are made. Faults become emails; emails become delays.
Compliance demands control
GDPR, sector regulation and customer contracts increasingly require demonstrable control over where data lives and who — or what — accesses it.
02Role of Nextcloud
Nextcloud is the foundation, not a plugin.
The workspace is built around Nextcloud as the trusted collaboration and knowledge layer — because sovereignty starts where your documents live.
The trusted collaboration layer
Files, permissions, groups, calendars and chat — Nextcloud is where your teams and documents already work, on infrastructure you control.
Extended with private intelligence
Sivatech adds private AI, permission-aware search, RAG and automation workflows directly on top of the Nextcloud knowledge base.
One sovereign workspace
The result: documents, teams, workflows and operational knowledge in one environment — under your organization's control, end to end.
Nextcloud
- FILES
- PERMISSIONS
- GROUPS
- CALENDAR
- TALK
Sivatech extensions
- PRIVATE AI
- RAG SEARCH
- WORKFLOWS
- MONITORING
- OT EVENTS
Sovereign AI workspace
03Core architecture
Ten layers. One controlled environment.
Every layer is replaceable, documented and under your control — from identity at the top to the OT edge at the bottom, with monitoring, backup, approval and audit spanning all of them.
- FILES
- SHARES
- GROUPS
- CALENDAR
- TALK
- MODBUS
- BACNET
- OPC UA
- MQTT
- M-BUS
Cross-layer
Every service monitored. Every dataset backed up, with tested recovery paths.
Sensitive actions wait for people. Every AI and workflow step is logged and reviewable.
Identity & Access Control
Single sign-on, roles and group permissions govern every layer below — for people and for AI.
Nextcloud Collaboration Layer
Files, shares, groups, calendars and talk — the trusted workspace where teams and documents already live.
Private AI Assistant
A language model running on your infrastructure, answering from your knowledge with source citations.
RAG / Vector Search
Documents are indexed for retrieval so answers are grounded in your files — respecting permissions.
Agentic Workflow Layer
Agents with defined tools prepare reports, process documents and route events — inside strict limits.
Data Platform
Databases and pipelines that consolidate business and operational data into dashboards and reports.
IT Infrastructure
Servers, storage, virtualization and networking — sized, secured and documented for your environment.
OT / Edge Connectors
Gateways for Modbus, BACnet, OPC UA and MQTT bring machine and building data across a protected boundary.
Monitoring & Backup
Every service is monitored; every dataset has a tested backup and a documented recovery path.
Human Approval & Audit Layer
Sensitive actions wait for people. Every AI and workflow action lands in a reviewable audit log.
04What it can do
Capabilities that compound.
Each capability is useful on its own. Together, on one knowledge base and one permission model, they change how the organization operates.
Permission-aware knowledge search
Ask questions across contracts, manuals, protocols and project folders. Answers cite sources and respect who is asking.
Private AI assistant for daily work
Drafting, summarizing, translating and answering — on internal knowledge, without data leaving the environment.
Document workflows with approval
Incoming documents are classified, extracted and routed. People approve before anything binding happens.
Operational dashboards
Business and operational data consolidated into live views — from KPIs to building and machine status.
OT events in the workspace
Faults and alarms from buildings and machines arrive as structured tasks in the collaboration layer, not as noise.
Automated reporting
Recurring management, customer and maintenance reports assembled automatically from live data.
One box · Seven configurations
The IT & AI Box is configured from modular building blocks. Start with the profile that solves your most pressing problem and extend it without replatforming.
- AI BOX· Private AI + RAG
- AGENT BOX· Agentic workflows
- IT BOX· Infrastructure core
- SOFTWARE BOX· Custom applications
- DATA BOX· Data platform + BI
- OT BOX· Machine + building links
- OPSBOX· Full operations stack
05Deployment models
Deployed where your constraints demand.
The same controlled stack, three ways to run it.
[ YOUR SITE ] — [ SIVATECH BOX ]
On-premises appliance
A dimensioned server environment installed in your building. Data never leaves the premises; AI runs on local hardware.
Best for · Strict data control, OT proximity, regulated environments.
[ EU DATACENTER ] — [ DEDICATED STACK ]
Private-cloud deployment
The same controlled stack on dedicated resources in a European datacenter under your contract — without operating hardware yourself.
Best for · Distributed teams, fast start, no server room.
[ SITES + EDGE ] ⇄ [ CENTRAL STACK ]
Hybrid edge-to-server
Edge gateways at your sites collect operational data locally and synchronize with a central private stack.
Best for · Multi-site operations, buildings, plants and portfolios.
06Security & control
Principles the box is built on.
Data under your control
Documents, knowledge and operational data stay on infrastructure you own or contractually control.
Role-based access
People and AI systems see exactly what their role allows — nothing more.
Permission-aware AI
AI answers respect the same file and folder permissions as the people asking.
Human approval
Sensitive workflow steps wait for a person. Agents prepare; people decide.
Audit logs
Every AI action, workflow step and access event is recorded and reviewable.
Backup & disaster recovery
Tested backups and documented recovery paths — not assumptions.
Monitoring
Infrastructure, services and integrations are monitored with clear alerting.
IT/OT boundary protection
Operational systems are integrated through controlled gateways, never exposed directly.
Data minimization
Workflows and agents access only the data a task requires.
Practical deployment models
On-premises, private cloud or hybrid — chosen for your constraints, not ours.
NEXT STEP
Plan your sovereign workspace.
Start with a Sovereign Stack Assessment: we map your systems, data and operations and design the IT & AI Box configuration that fits — before you commit to anything.