NebularHub™ · the sovereign cross-domain integration engine and digital twin platform for critical facilities
Sovereign. On‑premises.
Air‑gapped by design.
One platform, every subsystem: NebularHub unifies your facility’s disconnected systems into a live, AI-augmented digital twin — on your premises, under your brand, in your language.
- Signed .nhlic licensing
- Signed .nhpkg site packages
- Hash-chained audit
- Offline maps (PoC)
NebularHub PlatformCore · NebularHub EdgeLink · FloorPlan Studio · Fire Domain Pack · Domain Pack SDK
Sovereign by design
Built to run disconnected.
Critical facilities cannot depend on someone else’s cloud. Every NebularHub component deploys on your infrastructure and keeps working with the network unplugged — licensing, packaging, mapping and audit, all included.
-
Offline signed licensing
.nhlicEd25519-signed licenses activate offline, with grace ladders for disconnected sites. No phone-home, ever.
Offline activation is under test with pilot deployments.
-
Signed site packages
.nhpkgDeployment bundles are cryptographically signed end-to-end, so an air-gapped site can prove exactly what it is running.
-
Tamper-evident audit
Every admin write lands in a hash-chained audit log. Coverage is enforced in CI by the build, not a policy document.
-
Offline maps
MapLibre with PMTiles: map data ships inside the signed site package, so disconnected sites keep full geography.
Proven in proof-of-concept; general availability tracks the M2 on-prem profile.
-
Single-tenant on-prem profile
Committed · M2 · Q4 2026A single-tenant deployment profile, validated by Q4 2026 (M2) and designed to align with IEC 62443 zoning practice — alignment, not certification.
Secure AI Gateway sovereignty modes
Roadmap · design commitment MVP committed · M2 · Q4 2026“We bring AI to the systems that have none — legacy, disconnected, and off-grid — read-only by design, human-approved by policy.”
Local models only. Zero-byte-egress mode: nothing leaves the site.
In-Kingdom endpoints only, with a keyed audit record for every AI interaction.
Frontier models reached only after irreversible masking of site data.
These modes describe the architecture we’re building toward, presented as design commitments rather than shipped capability. AI in NebularHub is advisory and human-in-the-loop; there is no AI-to-actuator path.
Cross-domain by construction
Every subsystem, one operational spine.
Each subsystem in a facility speaks its own protocol and keeps its own log. NebularHub normalizes them into a single spine — built so new domains arrive as signed domain packs, not new products.
One alarm queue.
Every event from every pack lands in the same operator queue.
One severity model.
BACnet Life-Safety-aligned states, fixed platform-wide; identical on every site and every brand.
One audit trail.
Hash-chained and tamper-evident, shared by all domains.
The first domain pack, proving the spine.
On demonstration sites today, a real Kentec panel streams through NebularHub EdgeLink into live 2D and 3D monitoring. The EdgeLink driver core (dependency-free Modbus, ESPA‑444 and Kentec‑Vizulinx) passes 22 of 22 end-to-end tests, with zero-touch provisioning designed in.
Production MQTT ingest closes at M1 (September 2026); until then, ingest is pilot-grade.
Supplementary by definition. NebularHub adds supplementary graphics and monitoring to certified fire alarm panels. It is not a fire alarm product, and it never acts as the certified primary annunciation system.
Domain roadmap
Roadmap · in sequenceEach domain pack adds configuration to the same queue, severity model and audit trail — never a new product.
A digital twin operators actually use
Draw the floor once. Operate it live.
The geometry you author in FloorPlan Studio is the geometry your operators monitor: no re-drawing, no second tool, no export drift.
- FloorPlan Studio. 2D authoring with a live 3D extrusion preview; exits and evacuation routes are drawn as first-class geometry and export as signed .nhflo files. Six release phases, 220+ tests.
- Pro-3D live monitoring. Instanced device pins, evacuation chevrons, floor isolation and x-ray views, floating device cards.
- One symbol catalog. A 4-tier device symbol system carries from placement in the studio to live state on the wall.
- Guided import. Excel and CSV with a template, staged diff and partial accept; a Kentec LE2 adapter ships today. You review every change before it lands. Import validation to date is on synthetic fixtures.
Commission in an afternoon.
- 1
Import the panel config
Excel or CSV against a template: staged diff, partial accept, nothing lands unreviewed.
- 2
Author the floors
FloorPlan Studio turns plans into monitoring-grade geometry, with a live 3D preview as you draw.
- 3
Go live
Connect the panel through EdgeLink and the same geometry becomes the live monitoring view.
Enterprise-grade platform services
The unglamorous parts, done properly.
Identity, tenancy, audit and language support are platform services every domain pack inherits — built once, inspected continuously.
- Identity & access
- Keycloak single sign-on; role-based access with row-level security on a multi-tenant core. SAML and SCIM are committed for M3 (Q1 2027).
- Tamper-evident audit
- The same hash-chained audit trail covers every domain and every admin write, with coverage enforced in CI.
- Bilingual by construction
- English and Arabic with true right-to-left support: interface chrome flips through logical properties; canvases, maps and logos never mirror. Admin and monitor console translation is rolling out; layout and chrome are RTL-ready today.
- Live state
- Server-sent event streaming keeps every console on the same state; notification engine v1 routes events to the people on shift.
On our compliance roadmap: SOC 2 Type II, IEC 62443 assessments, and a KSA Civil Defence reporting overlay. These are roadmap items, not current state; we state certifications only when we hold them.
Channel-first white-label
Your brand in front. Our platform underneath.
NebularHub goes to market channel-first: built for system integrators and OEM partners to deliver under their own identity, on a platform Laplace continues to sign, license and secure.
Your logo leads
Partner logo and accent across the apps, with a discreet “Powered by NebularHub” lockup retained at fixed proportions.
Your brand only
Partner brand throughout the interface. Laplace Software remains the licensor: “a Laplace Software product” persists in license metadata, with tenant and brand carried in every token.
Runtime theming applies your accent color, logo set and display name through a code-enforced allowlist. That is the white-label surface today, expanding surface by surface through M3 (Q1 2027).
Region
Built for the Gulf. Deployable anywhere.
English ⇄ العربية
Right-to-left layouts and Arabic typography (IBM Plex Sans Arabic) are part of the platform design, not an afterthought.
Residency by deployment
On-premises or fully air-gapped: the data lives where your regulator says it lives, on hardware you control.
Standards posture
Workflows are designed to align with NFPA-style supervision practice. Regional civil-defence reporting is on our compliance roadmap.
From panel to picture in hours.
Bring a panel configuration export and a floor plan to the demo. Leave with your own facility live on screen.