Full data sovereignty, on-premise.

Above 50 employees NIS2 enters scope, and above €10M data sovereignty stops being a slogan.

NIS2 D.Lgs. 138/2024 applies on a combined sector-and-size threshold: an Italian company active in one of the regulated sectors and above the relevant size band falls in the direct scope, and so does a sizeable share of its supply chain. The compliance bar is real, set by the ACN baseline security measures, distinct for essential and important entities, with board-level liability for non-compliance.

Lemnia T3 (sovereign on-prem) runs on a dedicated GPU appliance inside the company's data centre or server room. The entire stack, namely model, graph, ingestion and audit log, lives on the company's hardware. No fragment of customer, supplier or employee data leaves the LAN at query time. Cloud-burst stays opt-in and per-batch, and the audit log is signed.

What the appliance looks like.

• Hardware target

  An x86_64 server with NVIDIA RTX 6000 Ada or equivalent, 256 GB RAM and NVMe SSD. Rack-mount or pedestal, in the data centre or server room already present at the company.

• Stack on the box

  Linux SEV-SNP for hardware attestation. vLLM 0.19+ runs Qwen3.6-35B-A3B-FP8 with the DFlash drafter (2.5-2.9× speedup). Local SQLite with sqlite-vec for the graph store, RocksDB for blob storage.

• User scaling

  Unlimited seats. Desktop clients pair via mTLS certificate over the LAN. The mobile companion app, on iOS or Android, pairs via QR code on first use.

• Integration surface

  All 19 v0.1.5 connectors plus the OpenAPI generic adapter for in-house systems. AD/Entra ID for SSO. Role-based access control inherited from the source systems.

What the DPO and the auditor receive, out of the box.

• Signed processing register

  Every query, every dossier read and every report export is logged with a BLAKE3 signature. Exportable as GDPR Art. 30 evidence in one click.

• Per-niche pre-signed DPIA

  A template DPIA already tailored to the company's sector (manufacturing, distribution, services). The DPO signs and files it, with no draft from scratch.

• NIS2 D.Lgs. 138/2024 surface

  Access log, patch management cadence, separation of duties and BCP/DR drill artefacts, all surfaced through the GDPR + AI Act compliance report.

• Sub-processor list

  Lemnia runs on-prem, so the sub-processor list is empty by design. Cloud-burst (Pro mode) lists the EU-hosted GPU vendor as the only optional sub-processor, with per-batch consent.

Why a €50M company can defend this choice in court.

Garante Provvedimento 474/2025 (Careggi case, €80,000 fine) and Tribunale di Siracusa 338/2026 (Art. 96 c.p.c. gross negligence) are not theoretical risks for a company at this scale, but insurable events. The insurable posture requires cite-or-refuse, a signed register per query and query-time local execution. Lemnia is built around these three requirements.

The 2026 Hyper-amortisation regime (L. 199/2025 + DM 4 May 2026) excludes cloud subscriptions from the benefit, since recurring cloud fees are operating expenses rather than depreciable capital assets. Lemnia, bought once and running on company hardware, qualifies for the 180% deduction up to €2.5M.