atlas.query(SELECT * FROM campaign WHERE)
↳ shield.verify(scope=atlas:read) ok
↳ tower.policy.row_level_check ok
↳ atlas.exec(plan=index_scan) 47ms
↳ atlas.stream(rows=1847, cursor=on)
↳ knox.audit.append(0x5d23...)
atlas.query(SELECT * FROM campaign WHERE)
↳ shield.verify(scope=atlas:read) ok
↳ tower.policy.row_level_check ok
↳ atlas.exec(plan=index_scan) 47ms
↳ atlas.stream(rows=1847, cursor=on)
↳ knox.audit.append(0x5d23...)
atlas.query(SELECT * FROM campaign WHERE)
↳ shield.verify(scope=atlas:read) ok
↳ tower.policy.row_level_check ok
↳ atlas.exec(plan=index_scan) 47ms
↳ atlas.stream(rows=1847, cursor=on)
↳ knox.audit.append(0x5d23...)
atlas.query(SELECT * FROM campaign WHERE)
↳ shield.verify(scope=atlas:read) ok
↳ tower.policy.row_level_check ok
↳ atlas.exec(plan=index_scan) 47ms
↳ atlas.stream(rows=1847, cursor=on)
↳ knox.audit.append(0x5d23...)
atlas.query(SELECT * FROM campaign WHERE)
↳ shield.verify(scope=atlas:read) ok
↳ tower.policy.row_level_check ok
↳ atlas.exec(plan=index_scan) 47ms
↳ atlas.stream(rows=1847, cursor=on)
↳ knox.audit.append(0x5d23...)
atlas.query(SELECT * FROM campaign WHERE)
↳ shield.verify(scope=atlas:read) ok
↳ tower.policy.row_level_check ok
↳ atlas.exec(plan=index_scan) 47ms
↳ atlas.stream(rows=1847, cursor=on)
↳ knox.audit.append(0x5d23...)

CANADIANDATA SUBSTRATE

ROW-LEVELSECURITY BY DEFAULT

PGVECTOR+ TSVECTOR + REAL-TIME

ATLAS

Canadian database infrastructure. Postgres with row-level security, vector storage, real-time subscriptions.

SCROLL

ATLAS · /0.1

Every Byte Stays on Your Hardware.

Atlas is CASTLE's answer to Supabase — a full-featured database platform with authentication, real-time subscriptions, object storage, and row-level security. But with zero external dependencies. Every byte stays on client infrastructure.

PostgreSQL with Row-Level Security Query-level permissions. Your data, your rules, enforced at the database layer.
PostgREST API Layer Instant REST endpoints. Generate APIs without writing code.
Real-Time Subscriptions Clients subscribe to changes. Push updates without polling.
Object Storage (MinIO) S3-compatible. Files, media, artifacts. All on-premises.
TypeScript SDK Full type safety. Seamless integration with frontend code.
Complete Source Transparency Every table, every function, every migration — visible and auditable.

Architecture

Platform Specifications

Engine

PostgreSQL 16

Enterprise-grade open-source database. ACID-compliant, fully extensible.

API Layer

PostgREST + REST

Instant REST APIs. No boilerplate. Auto-generated from schema.

Authentication

Shield-Integrated

Zero-trust auth. JWT tokens. Row-level security policies.

Storage

MinIO S3-Compatible

Object storage. Files, media, backups. On your hardware.

Security

Data Custody is Not a Feature. It's the Architecture.

Row-Level Security

Every query filtered by user permissions. Tower policies enforced at the database layer. Fine-grained access control down to individual rows.

Encryption at Rest

pgcrypto AES-256. Your encryption keys. Never transmitted. Complete control over data encryption and key management.

Audit Logging

Every read, write, update logged to tamper-evident audit trail. Who changed what, when, and from where — always auditable.

Air-Gap Ready

Atlas runs without internet. Full functionality offline. No cloud dependencies. Works in disconnected environments.

Integration with CASTLE

Echo Inference

Atlas stores interaction logs, user contexts, and system state for every inference. Echo pulls real-time context from Atlas for RAG and tool execution.

Crown Knowledge

Crown's vector embeddings and knowledge graphs live in Atlas PostgreSQL. Semantic search powered by Atlas infrastructure.

Shield Policies

Shield's role definitions and permissions stored in Atlas. Row-level security policies managed through Tower governance.

Lens Indexing

Browser activity, web research, and discovered data indexed in Atlas. All browser artifacts catalogued and retrievable.

Deploy in Four Hours

Install

Docker pull. One command. Atlas runs on any Linux, macOS, or air-gapped system.

Initialize

Create schema. Set RLS policies. Define object storage buckets.

Connect

Point Echo, Crown, Shield, and your clients. Start using Canadian data infrastructure.

Quick Start

Query and insert data with simple REST calls. No ORM required.

# Query — fetch recent events curl -X POST https://<your-instance>/api/query \ -H "X-API-Key: YOUR_API_KEY" \ -H "Content-Type: application/json" \ -d '{"sql": "SELECT * FROM events ORDER BY created_at DESC LIMIT 10"}' # Response { "success": true, "data": [ { "id": 5621, "title": "Deployment complete", "severity": "info" }, { "id": 5620, "title": "Health check passed", "severity": "info" } ], "count": 10 }

# Insert — create a new event curl -X POST https://<your-instance>/api/tables \ -H "X-API-Key: YOUR_API_KEY" \ -H "Content-Type: application/json" \ -d '{ "table": "events", "data": { "title": "Deployment complete", "severity": "info", "node_id": "jl3" } }' # Response { "success": true, "id": 5622, "message": "Row inserted into events" }

Atlas accepts X-API-Key or Authorization: Bearer headers. SQL injection protection is enforced at the API layer.

/ Contact · we read every inquiry

Talk to .

Demos, partnerships, government RFPs, technical questions. A person reads every form. You hear from someone — not a queue.