Manganese for the Public Sector
Sovereign PaaS deployed on your premises · Compliant with the "cloud-first" doctrine
Native traceability · Guaranteed reversibility · Quote within 48 h
Asalae — sovereign electronic archiving (Libriciel) deployed on Manganese by an AI agent, with no human shell intervention.
The 4 pillars of the offer
What Manganese Enterprise guarantees every authority, by design
Sovereignty
Multi-datacentre EU hosting, outside the Cloud Act and Patriot Act. Your data and workloads stay under European law, without exception.
Control
Control plane deployed physically on your premises. Generic Ubuntu LTS, no technology lock-in, no third-party SaaS dependency in the critical path.
Traceability
Every ops action goes through Prepared Shell Procedures (PSP) — signed, typed, journalled under journald. Native audit trail.
Reversibility
All data, services and configurations are recoverable at any time. Zero vendor lock-in by design.
Drive your infrastructure with a self-hosted LLM
Manganese exposes a Model Context Protocol (MCP) interface compatible with any AI agent — including an LLM self-hosted in your datacentre (Mistral, Llama via vLLM, GPT4All…).
Your AI assistant can provision environments, read logs, run commands and deploy code without ever sending a single piece of data outside your infrastructure.
- ✨ Provisioning and deployment driven by natural-language instructions
- 🔒 No citizen data exposed to a third-party LLM cloud
- 🏛️ Compatible with the State's 'trusted AI' doctrine
- 🔄 Swappable LLM model — zero AI vendor lock-in
(Mistral / Llama)
(your datacentre)
(never exposed)
From provisioning to a live citizen service
The agent doesn't just deploy the infrastructure — it builds, configures and documents a digital public service end to end, on the Publik stack (w.c.s. + combo) you already use
A representative citizen-assistance service built by an AI agent on the real Publik stack (w.c.s. + combo), in a development environment. No shell command typed by a human.
From the upstream git.entrouvert.org repository, the agent installs a full Publik server (combo + w.c.s.) on generic Ubuntu LTS — resolving on its own the Entr'ouvert dependencies missing from PyPI (django-mellon, hobo, gadjo, lasso…).
It creates a real citizen service: an adaptive form that questions the user, computes a diagnostic path and shows only the relevant pages.
It wires the multi-actor workflow (intake → processing → validation → closure), the mapping of functions onto business roles and the e-mail notifications.
It produces, by itself, the functional specification, a multi-audience training guide and a slide deck ready to share with local-government staff.
What the platform includes
Every building block of a modern infrastructure — hosted on your own hardware
Control plane on-premise
The muppy platform installs on your internal infrastructure. No control flow transits through a third-party operator.
PostgreSQL HA multi-host
High-availability replication across your servers, PITR, backups on your internal S3 bucket. No external DBaaS dependency.
Integrated SSL and PKI
Automatic Let's Encrypt certificates or integration with your internal PKI. HTTPS everywhere, no manual configuration.
Monitoring & alerts
Integrated system and application metrics. Automatic health checks with history. Configurable alerting with no cloud dependency.
Managed updates
Muppy orchestrates its own updates and those of the application components. The IT team keeps control of the deployment schedule.
Sovereign S3 storage
8 European S3 backends supported (OVH, Scaleway, Infomaniak, internal MinIO…). No AWS dependency in the storage path.
A read by role
The offer seen from each decision-maker
For elected officials / DGS
Take back sovereignty over your citizens' data. A predictable budget (RAM/month), a certifiable audit trail, a defensible political message: 'our data stays with us'.
For the IT department
A technology-agnostic platform on Ubuntu LTS. No proprietary template to learn. Your team keeps control of schedule, hardware and migrations.
For the CISO
Signed and journalled PSP, EU Zero Trust transport (Netbird), TLS terminated on your servers. Documentable architecture for an SSI accreditation dossier.
Use cases
Manganese Enterprise in local-government practice
Municipality or inter-municipality
Host your Publik citizen portal (w.c.s. + combo) and your business apps (CRM, internal DMS) on your own infrastructure — provisioned and configurable by an AI agent, with a certifiable audit trail for your elected officials and DGS.
Local authority with internal datacentre
Already have a server room? Manganese Enterprise deploys on it in one day and adds a complete PaaS layer on top of your existing or refurbished hardware.
IT department with ANSSI / RGS requirements
Documentable architecture for SSI accreditation. Sovereign EU transport (Netbird), TLS terminated on your servers, immutable logs. A solid basis for a security dossier.
Grouping or joint syndicate
Manganese Enterprise is multi-tenant by design: each department or member municipality gets its own isolated perimeter on a shared, pooled infrastructure.
Why Enterprise On Premise?
The SKU tailored to public-sector requirements
Zero data outside perimeter
In Enterprise On Premise configuration, neither the control plane nor the data plane leave your infrastructure. Native GDPR compliance.
Minimal prerequisites
1 Ubuntu 24.04 VM (4 CPU / 8 GB) for the control plane, 1 bare-metal or refurbished server, 1 S3-compatible bucket, 2 DNS entries. Deployable in 1 day.
Technology-agnostic
Generic Ubuntu LTS with no specialised template. Your existing business stacks (Java, Python, Node, PHP…) run without adaptation.
Native audit trail
Prepared Shell Procedures (PSP) sign and journal every ops action. Your CISO gets native traceability with no third-party tooling.
Total reversibility
Export all data and configurations at any time. No proprietary format. Migrate to another solution with no technical friction.
Comparison vs sovereign alternatives
Manganese Enterprise On Premise vs Managed K8s and DSP outsourcing
ℹ️ This comparison reflects orders of magnitude observed on the market. A detailed benchmark for your scope is available on request.
A public-operator reference
Manganese's technical foundation has been proven at the scale of a national public operator
To migrate its APIZ ERP from Oracle to PostgreSQL, La Poste was supported by the integrator Audaxis. The technical building blocks underlying Manganese (Muppy) administered a highly available, multi-cloud PostgreSQL infrastructure for several years, with greater operational visibility and a reduced administration workload.
Engagement concluded with the decommissioning of the APIZ ERP it served. Public source: 'La Poste française déploie l'open source', Code Source Ouvert, 18/04/2023.
Other clients (SaaS vendors, IT-services firms, industrial mid-caps) available on request, under NDA.
Regulatory anchoring and frameworks
Manganese speaks the language of public procurement
« Cloud au centre »
Manganese Enterprise On Premise falls under the 'internal cloud' doctrine set by the French Prime Minister. Compatible with the State's cloud strategy for sensitive data.
Controlled subprocessing
Standard data-processing agreement provided. Documented technical and organisational measures. No transfer outside the EU — native GDPR, not a checkbox.
Documentable architecture
Architecture documentation compatible with an SSI accreditation process. Integrable PKI, immutable logs, ANSSI principles respected by default.
Hosting compatibility
Manganese Enterprise deploys on a SecNumCloud-qualified host (OVHcloud, Outscale, NumSpot) or directly in your server room.
Enterprise pricing
One simple metric — the RAM of the enrolled physical servers
Floor price — includes ~2,048 GB RAM
- Control plane hosted at the authority
- HA data plane (multi-host PostgreSQL) included
- PITR backups on your internal S3 bucket
- Integrated monitoring, alerts and health checks
- Automatic SSL (Let's Encrypt or internal PKI)
- MCP — AI control over sovereign infra
- Journalled PSP (audit trail of every action)
- Updates managed by muppy
- Transport Zero Trust EU (Netbird)
- Total reversibility — frictionless export
- Sunray included
🔧 Infrastructure prerequisites
To be provided by the authority:
- Control-plane VM — Ubuntu 24.04, 4 CPU, 8 GB RAM (×2 for HA)
- Workload server(s) — Ubuntu 24.04, bare metal or refurbished
- S3-compatible bucket — Minio, Scaleway, OVH Object Storage…
- DNS + domain — 2 DNS entries minimum
Ready to take back control of your infrastructure?
Technical sheet within 24 h · Formal quote within 48 h · Deployment in 1 day