Sovereign IT · Alpha
More control over your IT tools.
Sovereign IT takes more than a different hosting address. It matters who controls access, how information moves between tools and what your team can change itself.
What Kebabstack connects
Hub manages people, sign-in and app permissions. Desk handles requests, Assets assigned hardware, Trust reported device posture and Contracts renewal decisions. Forms, Watch and Crumbs add submissions, domain monitoring and web analytics. Shared context reduces the work of finding the same information again.
Running on OpenCloud
Kebabstack runs on a Cloud Engine such as OpenCloud. Application modules keep their state in canisters, without requiring a separately operated SQL database server or Kubernetes cluster. The optional Crumbs Node collector uses a local SQLite queue. The infrastructure uses ICP; Kebabstack is not a general-purpose Docker installation.
Stored work survives compatible upgrades
Motoko’s orthogonal persistence retains the core applications’ persistent state across compatible upgrades, without a separate application database. Kebabstack snapshots the backend and frontend before updating and verifies the installed release. This is a platform capability used by the suite. Incompatible data model changes still need reviewed migrations; persistence replaces neither backups nor recovery tests.
What sovereignty means here
The MIT license allows teams to adapt and extend the code. Operators control their application canisters and controllers. They still need to choose and review data locations, infrastructure operators and external services. This does not automatically provide EU-only processing or confidentiality from infrastructure operators.
One permission model
Official apps receive their roles from Hub. Employees see their own and explicitly shared content; administrators see the areas assigned to them. Upstream changes only take effect after Hub learns about them. Apps refresh their directory information and deny access when it becomes too old, so a Hub outage can interrupt sign-in and work.
What still costs money?
Kebabstack has no per-person license fee of its own. Cloud Engine infrastructure, external APIs, migration and operating time still cost money. A pilot should measure which subscriptions can actually be retired and how much routine work is saved. There is no validated capacity or cost benchmark yet.
Who should consider a pilot?
Small IT teams that want to shape connected workflows and can deliberately evaluate an alpha. Teams requiring an immediate, complete replacement for enterprise ITSM or IAM should check their required capabilities individually first.
Explore the connected stackImplemented alpha. Public source is available under MIT. OpenCloud Marketplace integration is in preparation.