Where your process data lives is your decision
Novasign Studio runs on your own servers, in your own cloud account or on an appliance that Novasign builds and ships, and Managed Novasign Cloud, which Novasign runs for you, is rolling out. The on-premise and appliance options can run air-gapped, and you decide where your process data is stored. The same installation grows with you, from one scientist to a whole department and from a single model in training to many trained side by side.
- On-premise (Available Today). You: site, power, network, servers. Novasign: cluster, studio and maintenance.
- Your cloud (Available Today). You: site, power, network, servers. Novasign: cluster, studio and maintenance.
- Appliance (Available Today). You: site, power, network. Novasign: servers, cluster, studio and maintenance.
- Managed Novasign Cloud (Rolling Out). Novasign: site, power, network, servers, cluster, studio and maintenance. Run by Novasign.
- Sign In Through Your Identity Provider in All Four Options
- On-premiseAvailable Today
You provide the servers and the network segment. Novasign provides and maintains the platform.
- Your cloudAvailable Today
Studio runs in your own cloud account and region, so your data stays in the region you choose.
- ApplianceAvailable Today
Novasign builds, tests and ships a dedicated server. You provide rack space, power and a network connection.
- Managed Novasign CloudRolling Out
Novasign runs the environment for you from end to end. It is rolling out, and no general availability date is published yet.
Setting up a deployment
Where it runs and what may leave it are your decisions, and sign-in connects to the identity provider you already use.
- 1
Choose where it runs
Novasign sizes the deployment with your team. Each node needs at least 24 vCPUs and 64 GB of RAM, on a private network segment with no public ingress. For a proof of concept, Novasign can host Studio for you during a trial period, so you can evaluate it before setting up any infrastructure.
- 2
Connect your identity provider
Studio signs people in with SAML 2.0 or OpenID Connect against your identity provider, such as Microsoft Entra ID, Okta or AD FS, or against LDAP or Active Directory, and can provision accounts with SCIM 2.0. Your provider’s multi-factor policy applies to those sign-ins. Accounts outside it can use one-time codes or passkeys, which each organization can make mandatory.
- 3
Decide what may leave
On-premise and appliance deployments store your projects, models, datasets and process data inside your network, and an air-gapped installation sends nothing outside it. Where a deployment opts into connected monitoring, you review its scope with your security team first. Credentials for the systems Studio connects to are resolved at run time and never sit in a workflow or in the browser.
Studio scales with the work you give it
Novasign Studio is built for one user or a whole department, for a small dataset or a very large one, and for a simple model or an integrated process model that needs far more computation. It distributes runs across a pool of workers that run side by side, and each worker uses the cores and memory it is given.
- First, your workflow in Novasign Studio, shown as three connected nodes on a card that carries the Novasign logo.
- Its work fans out into a dashed region labelled as your cluster.
- Inside it, three workers run tasks side by side, each one made of cores and memory.
- A dashed empty row stands for a worker you add to scale out.
- Last, the results gather back into one set.
- Horizontal scaling
Add workers to run more at once
Capacity is a pool of workers rather than a single machine. Add workers, and Studio distributes the simulations you queue across more of them and gathers the results into one set.
- Vertical scaling
Give each worker more cores and memory
The cores and memory each worker receives are set in the cluster configuration. Raising them leaves every workflow, dataset and model exactly as it was.
- Data residency
Scaling stays inside your environment
Both are settings in the cluster configuration, agreed with your team. The platform, the sign-in, the projects and the private network segment stay the same.
The engines powering Novasign Studio
You draw a workflow, and the kind of distributed engine that large data teams rely on does the heavy work underneath it. All of it ships with the deployment and runs inside it, on the deployment’s own storage. Each engine is a default rather than a hard dependency.
- Queries
- A distributed query engine answers SQL across converted datasets, so a question about a very large table runs across the cluster instead of on one machine.
- Conversions
- A distributed compute engine does the conversions and exports, splitting a big table across the cluster rather than pulling it through one process.
- Storage
- Datasets are held in an open columnar table format on S3-compatible storage inside your own deployment. Your own tools can read them, and no proprietary file format locks them in.
- Training
- Models are trained on open deep-learning frameworks that the machine-learning research community uses, not on a proprietary one.
- Distribution
- A distributed executor hands the pieces of a run to the workers and brings the finished pieces back.
Novasign Studio security by deployment option
Six questions an IT security assessment usually asks first, answered for each of the four deployment options.
| On-premise | Your cloud | Appliance | Managed Novasign Cloud | |
|---|---|---|---|---|
| Where process data is stored | On your servers | In your cloud account and region | On the appliance in your rack | In a Novasign environment in an agreed region |
| Public internet exposure | None by default | None by default | None by default | Agreed with you |
| Sign-in | Your identity provider over SAML 2.0 or OpenID Connect | Your identity provider over SAML 2.0 or OpenID Connect | Your identity provider over SAML 2.0 or OpenID Connect | Your identity provider over SAML 2.0 or OpenID Connect |
| Novasign remote access | Scoped, via your jump host or VPN, under named accounts | Scoped, via your jump host or VPN, under named accounts | Scoped, via your jump host or VPN, under named accounts | None into your network |
| Air-gapped operation | Supported, engineered per engagement | n/a | Supported, engineered per engagement | n/a |
| Backup | Your backup tooling, or hypervisor snapshots | Volume snapshots or your cloud backup tooling | RAID plus a backup target you nominate | Operated by Novasign to objectives agreed with you |
Where process data is stored
- On-premise
- On your servers
- Your cloud
- In your cloud account and region
- Appliance
- On the appliance in your rack
- Managed Novasign Cloud
- In a Novasign environment in an agreed region
Public internet exposure
- On-premise
- None by default
- Your cloud
- None by default
- Appliance
- None by default
- Managed Novasign Cloud
- Agreed with you
Sign-in
- On-premise
- Your identity provider over SAML 2.0 or OpenID Connect
- Your cloud
- Your identity provider over SAML 2.0 or OpenID Connect
- Appliance
- Your identity provider over SAML 2.0 or OpenID Connect
- Managed Novasign Cloud
- Your identity provider over SAML 2.0 or OpenID Connect
Novasign remote access
- On-premise
- Scoped, via your jump host or VPN, under named accounts
- Your cloud
- Scoped, via your jump host or VPN, under named accounts
- Appliance
- Scoped, via your jump host or VPN, under named accounts
- Managed Novasign Cloud
- None into your network
Air-gapped operation
- On-premise
- Supported, engineered per engagement
- Your cloud
- n/a
- Appliance
- Supported, engineered per engagement
- Managed Novasign Cloud
- n/a
Backup
- On-premise
- Your backup tooling, or hypervisor snapshots
- Your cloud
- Volume snapshots or your cloud backup tooling
- Appliance
- RAID plus a backup target you nominate
- Managed Novasign Cloud
- Operated by Novasign to objectives agreed with you
Each row is answered for all four options. "n/a" means the option does not offer it.
The compliance program
Novasign runs a formal information security and compliance program. It is working towards ISO 27001 and SOC 2 and covers GDPR and the EU AI Act. The Novasign Trust Center documents the program as its evidence is collected, and Novasign answers security questionnaires on request.
Tell us your IT requirements
Every IT organization sets its own policies, for outbound traffic, for identity and for maintenance windows. Share yours, and our team will match them to the deployment option that fits.