INDUSTRY · GOVERNMENT

Sovereign software is non-negotiable.
Sovereign SaaS is not a thing.

Citizen services, ERP, case management, regulatory tooling — each asks the entity to trust foreign infrastructure with sovereign data. Do not start with a procurement round. Build one service on infrastructure you already host, then work back to the contract.

  • The entity owns the code from commit one
  • Hosted on entity infrastructure
  • Every model call logged where you can see it
The estatereplaceable
  • Citizen service portalOne citizen front door
  • Case management platformOwned casework layer
  • Compliance screeningScreening on the entity's model
  • Procurement suiteProcurement workflow
  • Back-office ERPOwned back-office services
  • Vendor BI moduleContinuous reporting ledger
Citizen services · casework · compliance · procurement · reportingyours on commit one
Why this domain exists

The mandate belongs to the entity.
The infrastructure carrying it does not.

A public entity answers to a legislature, an auditor and the citizen. The platform it runs on answers to a supplier. Three forces, none accidental.

Government entities — federal, ministerial, municipal, regulators, defence — face the sharpest version of the SaaS bargain. The vendor offers speed; the entity gives up sovereignty over data residency, model training, audit logs and change cadence. Saudi Vision 2030 and the UAE digital-government programmes have raised the bar for sovereign AI, and a licence cannot meet it.

Residency is narrower than it reads

A local-region claim covers where the records sit. It rarely covers model training, support engineers with access, or the analytics pipeline the vendor runs behind the service.

The audit trail is the vendor's

Decisions made inside the platform live in the platform's logs. A parliamentary or regulator-level audit becomes a negotiation with a supplier instead of a query against your own record.

Priced per citizen, per case

Population and caseload grow faster than the budget cycle. Every new programme means a new line item and another procurement round before the service can start.

Residency perimeterThe supplier's residency claim, not the entity's boundary.
In regionResidency is narrower than it reads.
Inside the claim
  • Where the records sit
Outside it
  • Model training
  • Support engineers with access
  • The analytics pipeline the vendor runs behind the service

Rented today

  • Residency is narrower than it reads
  • The audit trail is the vendor's
  • Priced per citizen, per case

Owned after

  • Your systems
  • Claude-first engine
  • Your data
What this desk rents today collapses into one stack it owns outright.
STAGE 01Ignite

Start with a service the entity could never procure.

New agents beside the platforms in place, on infrastructure the entity already hosts. Nothing retired, nothing migrated — every existing contract is untouched. Confidence starts here, in weeks.

Citizen-service agent

Conversational and form-based handling for applications, status checks and document submission. The agent reads the entity's own published policy and writes back only when an officer approves.

Runs beside the entity's existing service channels

Service-quality agent

Citizen feedback triaged, complaints routed and service-level slippage surfaced to the desk that owns it, generated from the channels the entity already operates.

Reads the entity's own feedback and case channels

Procurement drafting agent

Tender documents drafted, bid evaluations prepared and vendor compliance tracked against the entity's own procurement code, with the audit trail written as the work happens.

Built on the entity's published procurement code

STAGE 02Reforge

The estate the entity owns, rebuilt AI-native.

Casework, compliance screening and programme reporting: designed, run and paid for outright by the entity. Same mandate, modern substrate, every decision traceable — every line the entity's.

IN — what the entity runs today
  • Citizen service portal
  • Case management platform
  • Compliance screening
  • Procurement suite
  • Back-office ERP
  • Vendor BI module
SAIF

the saasinator AI Factory — glass-walled delivery

  • Brief
  • Build
  • Evals
  • Deploy
  • Transfer
OUT — what the entity owns afterwards
  • One citizen front door
  • Owned casework layer
  • Screening on the entity's model
  • Procurement workflow
  • Owned back-office services
  • Continuous reporting ledger

Product categories are the ones the entity already runs. What comes out the other side is the entity's — source, models, data and pipeline, transferred on commit one.

Case-management rebuild

Inspection, licensing and enforcement workflows rebuilt on infrastructure the entity hosts. Caseloads, service levels and audit trails generated against the entity's mandate rather than a vendor's product map.

Rebuilt against the entity's own statutory mandate

Performance and reporting ledger

Programme reporting, budget execution and performance indicators read directly from the entity's systems of record, so the audit committee opens a view instead of commissioning an extract.

Rebuilt across the entity's own systems of record

Master-data reconciliation

One citizen record across the ministries that share the lifecycle, reconciled by agents rather than by the digital-transformation programme that currently absorbs the effort.

Consolidates the records spread across entity platforms

Coverage

Six levels. The same pattern in each.

Where the mandate is most the entity's own, the licence bites hardest. The levels of the public sector we work in, and the pattern inside each.

Federal & national
  • Policy, treasury, immigration and identity workflows
  • National-scale services on entity-hosted infrastructure
  • Cross-ministry reporting from one owned record
Ministries & regulators
  • Sectoral ministries — health, education, transport
  • Independent regulators in utilities, telecoms and finance
  • Licensing and enforcement casework as owned workflow
Municipal & city
  • Smart cities and municipalities serving residents locally
  • Permit, inspection and service-request workflows
  • Local service performance visible in one place
Defence & security
  • Defence ministries, security services and border agencies
  • Sovereignty and residency at the top of the requirement list
  • Every model call logged inside the entity's own perimeter
Sovereign wealth & state-owned
  • Sovereign funds, state-owned enterprises and holding companies
  • Portfolio and mandate reporting as an owned pipeline
  • Counterparty screening on the entity's own risk model
Judicial & administrative
  • Courts, tribunals and administrative bodies
  • Case management and adjudication as owned workflow
  • Decision provenance recorded as the case proceeds
STAGE 03Liberate

The foreign contract comes out. The service keeps running.

Liberation is earned, not sold. By the time we replace a platform, the entity has watched us build on its own infrastructure. Then the per-citizen licence stops pricing citizens.

The licence ledger

Illustrative

The commercial shape of a public-sector stack, as a buyer reads it

Basis of charge
Per citizen, per case, per module. The measures of public demand are the measures on the invoice.
Growth condition
Population and caseload move the bill upward between budget cycles, and a new programme is a new line item before it is a service.
Residency scope
Where records rest is contracted. Model training, support access and the analytics pipeline are frequently a separate question with a separate answer.
On exit
Policy logic, service definitions and the decision trail sit inside the vendor's schema — not in an asset the entity holds.
Cost of staying————

Shape only — the direction of travel, not a quantity. The entity's own curve comes from its own renewal schedule.

Illustrative. This is our reading of a commercial pattern common to public-sector software, not a quotation from any vendor agreement — no contract text, no clause references, no figures.

Sovereign citizen-service platform

The citizen front door rebuilt on infrastructure the entity hosts, so residency, model training and the decision log all sit inside the entity's own perimeter rather than in a supplier's.

Replaces the cloud SaaS running citizen-facing services

Owned compliance screening

Sanctions screening, counterparty checks and sovereign-risk monitoring rebuilt on the entity's own risk model, auditable per decision instead of scored by a licensed artefact.

Replaces the vendor screening and monitoring platform

Owned back-office layer

The ERP workflows the entity actually uses, rebuilt as services it hosts and edits, replacing the modules bought to cover a fraction of them.

Replaces the licensed back-office ERP modules in use

How it is built

Glass-walled from brief to transfer. Nothing behind a black box.

SAIF is our delivery method and it runs in the open. You watch the build as it happens, read the evals that gate every release, and keep every artefact — including the ones that record what did not work.

  1. 01

    Brief

    One workflow, scoped against your own data and your own renewal position.

  2. 02

    Build

    Agentic delivery against your systems, visible while it runs.

  3. 03

    Evals

    Every release gated on tests you can read and re-run yourself.

  4. 04

    Deploy

    Into infrastructure you control, alongside the system it stands beside.

  5. 05

    Transfer

    Your team runs it. We do not leave until they can.

You own it from commit one

Source, models, prompts, evals and pipeline. Not a licence to use what we built — the asset itself.

Two weeks to a working build

A working build against your own systems in two weeks. Fixed scope, fixed bill.

It runs on your infrastructure

Deployment is into the environment the entity controls. Model calls, logs and data stay inside the entity's own perimeter, and the audit trail is a view the entity opens rather than a request it files.

Proof

Not a claim. Terms we sign up to.

100%
IP transferred on commit one
0
per-citizen or per-case fees
2 weeks
to a working build · fixed scope, fixed bill
Our commitment

Every engagement starts with a scoped working build against your own systems. If it doesn't convince you, you pay nothing — and you keep the code either way.

The ask

Bring one service that should have stayed sovereign.

Ten working days. Which capability to build first, what the next renewal costs the entity, and what owning the replacement takes. The entity keeps the analysis.

Fixed feeTen working daysNo commitment beyond the diagnostic