Platform Security Solutions Resources
Contact Sales Request Demo
Resources & Documentation

Everything you need to
evaluate and deploy

Technical documentation, deployment runbooks, security whitepapers, and operational guides for the LakeX Sovereign DataVault platform.

📖 Documentation
Deployment & Installation Guide
Step-by-step guide for deploying Meridian, Stratum-S, Stratum-US, and the AI server on RHEL 9. Covers Docker Compose (single-node) and Kubernetes/Helm (production cluster) paths.
Read guide →
🔐 Security
Security Architecture Whitepaper
Deep-dive into Sovereign DataVault's cryptographic architecture: envelope encryption, PKCS#11 HSM integration, post-quantum hybrid construction, key lifecycle, and SIEM integration. For security and compliance teams.
Read whitepaper →
📋 Operations
Vault Runbook
Complete operational runbook for HashiCorp Vault in the Sovereign DataVault environment — initialisation, auto-unseal configuration, snapshot scheduling, and disaster recovery procedures.
Read runbook →

Documentation

Runbooks & Operations

Key Technical Concepts

LVS / Structured Plane

Handles relational database sources. LVS agent, Trino, Iceberg REST catalog (datagen-catalog), and PostgreSQL 16 on each Stratum-S node.

LVUS / Unstructured Plane

Handles file-based sources. LVUS agent, Qdrant vector store, Ollama embedding model, and Iceberg REST catalog on each Stratum-US node.

LvsParquetTracker

Per-file metadata tracker storing sort column bounds (min/max). Enables file-level pruning at query time — before Trino opens any file.

datagen-catalog

FastAPI-based Iceberg REST catalog deployed per-Stratum. Trino connects to it for Iceberg table metadata. Backed by per-Stratum PostgreSQL 16.

Sort Advisor

Pure function that inspects table schema and returns the optimal sort column and strategy (single, Z-order). No DB access — fully unit-testable.

Envelope Encryption

A DEK (Data Encryption Key) encrypts the data; the DEK is then wrapped by the KEK (master key) from the active crypto provider (HSM, Vault, KMS, or software).

X-Wing KEM Combiner

The PQC hybrid construction concatenates ML-KEM-768 and X25519 shared secrets, then runs HKDF-SHA-512 — endorsed by IETF PQUIP WG for TLS 1.3 PQ hybrid.

DSAR 3-Phase Search

Phase 1: NER index lookup (entity exact match). Phase 2: SQL query over structured archives. Phase 3: Qdrant semantic vector search over unstructured.

Need documentation not listed here?

Our team provides personalised technical documentation for evaluation customers, including deployment guides specific to your environment and integration patterns.

Contact our team