Private AI Platform · SD3 Tech

SD3 Tech | Systems Thinking. Real-World Results.

LUMIS

Your data. Your walls. Your answers.
A private, on-premise AI platform deployed inside your network — on your hardware, in your building, under your control. No cloud. No subscriptions. No exposure.

$0
Per query cost
$0
Per user / month
100%
Data stays on-site
Users & queries

LUMIS Portals

Three portals. One platform.

Every LUMIS deployment is purpose-built around your industry and data. All three run entirely on your hardware and keep your data inside your walls — no exceptions.

Business Intelligence
LUMIS Insight
Your documents, SOPs, and databases — answered instantly by private AI.

A secure internal chat interface grounded in your own documents and data. Staff get accurate, role-appropriate answers sourced from what you've written — not the open internet.

  • Internal chat grounded in your documents and databases
  • Document upload: PDF, Word, CSV, plain text
  • Multi-database connectivity (orders, inventory, CRM)
  • Role-based access — up to 5 permission levels
  • Custom system prompt per role
  • Full query audit logging
RAG Pipeline Ollama Self-Hosted Role-Based
Industrial AI Assistant
LUMIS Industrial
Natural-language queries over your SCADA historian, OEE, alarms, and process data.

AI-powered analysis layered over your SCADA historian and process data. Ask about alarm trends, downtime root causes, and production KPIs in plain English — no SQL required.

  • SCADA historian integration (OPC-UA, OPC-DA)
  • Natural-language queries over time-series data
  • Alarm trend detection and downtime root cause
  • OEE and production KPI AI queries
  • Runs inside your OT network — no cloud dependency
  • Compatible with Ignition, FactoryTalk, WonderWare
SCADA Integration OPC-UA Time-Series AI On-Prem OT
Regulated Environments
LUMIS Secure
Air-gapped AI for CMMC, HIPAA, and ITAR networks. Zero cloud. Full compliance architecture.

Purpose-built for classified or compliance-driven networks. Architected for air-gapped deployment using open-weight models — zero cloud dependency, zero external API calls, full audit logging.

  • Fully air-gappable — no internet required
  • CMMC Level 2 architecture alignment (AC, AU, SC, IA, CM, MP)
  • HIPAA and ITAR-friendly deployment model
  • Open-weight LLMs — no vendor lock-in
  • Forensic audit logs — Wazuh / Splunk compatible
  • MFA, SSO, and custom role architecture
Air-Gapped CMMC-Aligned HIPAA-Friendly Open-Weight LLMs

Deployment Options

Two models. One promise.

Whether your data lives on-site or in a private cloud tenancy, LUMIS keeps it there. SD3 Tech deploys and manages it remotely — we never hold your data.

On-Premises
LUMIS OnSite

LUMIS runs on physical hardware at your location. Ideal for compliance-driven organizations and any environment where data cannot leave the building. Fully air-gappable.

LocationYour facility
HardwareSD3 Tech specifies & sources
ManagementRemote via VPN / SSH
Best forManufacturing, Legal, Healthcare, Defense
ComplianceCMMC, HIPAA, ITAR-friendly
Internet requiredNo — fully air-gappable
Private Cloud
LUMIS CloudVault

LUMIS deployed inside your own AWS, Azure, or GCP tenancy. Your account. Your VPC. Your keys. Ideal for cloud-native organizations whose data already lives in a private cloud environment.

LocationYour cloud tenancy
HardwareVM in your account
ManagementRemote via your IAM
Best forSaaS, Remote-first, Cloud-native
ComplianceInherits your cloud certifications
Internet requiredPrivate network only
$0
Per query, ever
$0
Per user per month
Queries per day
100%
Data stays yours
Compliance

Built for regulated environments

LUMIS Secure's architecture directly supports CMMC Level 2, HIPAA, and ITAR. SD3 Tech's existing DISA STIG and NIST expertise means compliance is built in — not bolted on.

CMMC · AC
Access Control

Role-based query gating controls what each user can ask and retrieve. Supports Level 2 AC practice family.

CMMC · AU
Audit & Accountability

All queries logged with user, timestamp, and session. Full forensic audit trail. Wazuh / Splunk compatible.

CMMC · SC
Comms Protection

No external API calls. No outbound data. LUMIS operates entirely within your controlled network boundary.

CMMC · IA
Identification & Auth

Integrates with existing auth. MFA and SSO ready. No separate credential surface created.

CMMC · CM
Config Management

All deployments managed via Ansible and IaC — auditable, repeatable, versioned.

CMMC · MP
Media Protection

CUI stays on your controlled hardware. On-prem means data never transits to uncontrolled media.

HIPAA · §164
PHI Containment

No PHI leaves the network. LUMIS never calls external APIs with patient data — a fundamental HIPAA safeguard.

ITAR · §120
Export Control Ready

Technical data stays on-prem. No foreign cloud servers, no third-party models, no export control exposure.

Note: LUMIS supports compliance but does not certify your organization independently. Full CMMC certification requires a complete program and C3PAO assessment. SD3 Tech can assist with the full compliance roadmap.

Backed by 25+ Years of Zero-Breach IT

LUMIS is built on the same security-first philosophy SD3 Tech has applied to cybersecurity, Linux infrastructure, SCADA/ICS systems, and custom software for Utah businesses since 1999.

Cybersecurity Linux / STIG SCADA / ICS Custom Software Air-Gapped Environments NIST Frameworks

Free 15-Min LUMIS Audit

We'll review your setup and identify exactly which LUMIS portal fits your operation. No pressure, no jargon — straight answers from engineers who've done this before.

Book Your Free Audit →