Microsoft
For teams that want Prismara apps and keep Entra ID.
- Sign-in
- Entra ID
- Exchange Online
- Apps
- Prismara SOC, Service Desk, CRM, HR and more
The sovereign software suite from SovSec
Run your organisation on software you control.
The EU-hosted, post-quantum-secure alternative to Microsoft 365 — identity, mail, office, security and device management in one suite you control.
- Transport
- Hybrid post-quantum TLS 1.3
- Hosting
- EU, operated from Austria
- Audit
- Hash-chained, tamper-evident
- Supply chain
- Licence-checked on every build
The platform
One platform for identity, security and the business behind it
Every Prismara product signs in through Prismara Identity, writes to the same tamper-evident audit trail and reports security events to Prismara SOC. Use the whole suite or start with one product.
How it's built
Security decisions made once, applied to every product
The same engineering rules run through the whole suite, so a security review of one product tells you how the others behave.
Transport
Post-quantum ready from day one
Control-plane connections use TLS 1.3 with the hybrid X25519MLKEM768 key exchange. Agents and gateways refuse classical-only connections.
Authority
Servers can't forge your intent
Access grants, admin actions and policy bundles are signed by keys you hold, and the most sensitive steps need two of three custodians. A compromised server can relay them but cannot widen, re-target or replay them.
Policy
Default deny, fail closed
Nothing is reachable until a policy allows it. When a grant expires or a check fails, access stops rather than falling back to open.
Audit
Tamper-evident by construction
Every product writes an append-only, SHA-256 hash-chained audit log. Any edited or deleted entry breaks the chain and shows up in review.
Isolation
Tenants separated in the database
PostgreSQL row-level security is enforced on every tenant table, so a query bug cannot return another customer's records.
Supply chain
Audited libraries, checked licences
Cryptography comes from audited open-source libraries. SovSec's own code is permissively licensed, and every build checks each dependency's licence. The few copyleft parts, such as Chromium's engine and the Linux base of Prismara OS, are documented exceptions with full source published.
Deployment
Move at your own pace away from Microsoft
Prismara works with the Microsoft estate you already have. Choose how much to move, and change mode later without re-platforming.
Hybrid
For organisations moving in stages.
- Sign-in
- Prismara Identity with Entra ID as a declared fallback
- Either platform, migrated mailbox by mailbox
- Apps
- The full suite, Microsoft integrations kept
Sovereign
For full independence from US-controlled services.
- Sign-in
- Prismara Identity
- Prismara Mail
- Apps
- The full suite on EU infrastructure under your keys
Want SovSec to run it for you?
SovSec provides managed security, SOC and Microsoft 365 services for organisations in the UK and DACH region, and can run Prismara as part of that service.