Deployment sovereignty: Cloud, Dedicated VPC (CMEK), or Sovereign K8s
shteg.ai approach
Available in three architectural deployment models: Enterprise Cloud (multi-tenant GCP), Enterprise Dedicated (single-tenant dedicated VPC, dedicated Postgres/K8s, Cloud KMS CMEK key control), and Enterprise Sovereign (open Helm chart for air-gapped on-premise Kubernetes, local Dex IdP SSO, MinIO S3 WORM storage, and local edge model inference). Data residency and root encryption keys remain strictly under customer jurisdiction.
How the field generally works
Established health IT and EMR platforms are overwhelmingly delivered as proprietary, multi-tenant black-box SaaS or legacy on-premise fat-client Windows servers. Customers have zero control over cloud encryption keys (CMEK), cannot run air-gapped without external telemetry, and are locked into vendor-controlled identity providers.