Foundation

A stack you can own.

Foundix stands on components EU operators can run, audit and replace. No opaque appliance as a single point of control.

Compute — Proxmox VE

Clustered virtualisation as an open compute control plane. Clusters you can document, patch and — if required — keep running without Foundix.

Storage — encrypted ZFS

Multi-tenant isolation at storage level. Encryption, snapshots and send/receive as a recovery path. Tenant A does not read tenant B.

Network — OPNsense under SOVNC

Zero-trust segmentation, operator-controlled DNS, no mandatory external resolver in the critical path.

OS — Rocky Linux / Debian

Hardened baselines. Fewer moving parts, more reproducible images.

Backup — PBS and sanoid under SOVGO

Independent recoverability. A backup you cannot restore is not a backup.

AI — SovTooling

GPU and inference local. No mandatory non-EU model API for core functions.

What Foundix refuses in the critical path

A non-EU identity or update control plane you cannot leave. An AI chain that exports prompts to look clever. A backup that exists only in the vendor’s cloud. A network fabric you cannot segment yourself.