§ 00Signal Nine v4.2sealing every second

Know what touched your data, and when.

Signal Nine records every read, write and export on your databases and buckets into a sealed, append-only ledger. When something goes wrong, you get the answer in seconds, with the proof attached.

1.8% CPU per nodeCapture overhead
1secondSeal interval
2.6s at p95Query, 7 years back
3waysDeploy targets, incl. air-gapped
Ledger · node ash-03Example · invented datablock 88 214 377
    § 0101 / 08

    Three jobs, done without sampling.

    Signal Nine sits under your applications, not inside them. Nothing to change in your code.

    Trail

    Every access, recorded.

    Reads, writes, exports and permission changes, captured at the driver and storage layer. No sampling, no agent-side filtering.

    SQL · object storage · warehouse
    Seal

    Proof nothing was edited.

    Each second of events is hashed into a chain. An edit or a gap breaks every seal after it, and the break says where.

    SHA-256 chain · 1 s blocks
    Replay

    The answer, not a log dump.

    Ask who read a table between 02:00 and 02:40 and get the events back with their seals, ready to hand to an auditor.

    console · API · signed export
    § 0202 / 08

    Five parts. One of them is the point.

    The sealer is what makes the ledger evidence rather than a log: every second it closes a block and chains it to the one before.

    01SourcesDatabases, buckets, warehouse 02CollectorOne process per node 03SealerHash chain, every second 04LedgerAppend-only, write-once 05QueryConsole, API, export
    Data path

    Nothing leaves your network unless you choose the hosted ledger. Row contents are never copied; only which rows, by whom, from where.

    § 0303 / 08

    One event, every field.

    This is the whole record. Seven fields, the same for every source, so one query covers your database, your buckets and your warehouse.

    FieldExampleMeaning
    evente_7Q2K-19F4-0081Unique id, sortable by time
    at2026-03-14T02:17:09.412ZTime on the node, corrected against the sealer clock
    actorsvc-reporting · key k_44a1The person or service key that made the call
    actionREADREAD, WRITE, EXPORT, GRANT or REVOKE
    objectwarehouse.customers · 1 204 rowsWhat was touched and how much, never the contents
    origin10.20.4.17 · node ash-03Where the call came from and which node saw it
    sealblock 88 214 377 · 9f3c…e21aThe block this event was sealed into
    § 0404 / 08

    Measured, then sealed.

    40 000Events per nodeper second, sustained
    1 sSeal intervalfixed, not batched by load
    2.6 sQuery p95across 7 years of one node
    10 yrsRetentionwrite-once storage

    Example figures from our reference rig (12 nodes, mixed read and write load). Your numbers come from a two-week trial on your own systems.

    Nine blocks, each sealed to the last. Edit one and see what breaks.

    1. #1a41c
    2. #207be
    3. #3d9f2
    4. #43e81
    5. #5c5a0
    6. #66f17
    7. #7b2d4
    8. #808e9
    9. #9f7c3

    All 9 seals verify.

    § 0505 / 08

    Runs where your data already lives.

    Same ledger, same console, three places to keep it. You hold the keys in all three.

    Your cloudSignal Nine cloudAir-gapped
    Ledger livesYour accountOur EU regionYour rack
    Keys held byYouYou (we never see them)You
    UpdatesMonthly, you approveMonthly, automaticSigned bundle, by hand
    SetupOne afternoonOne hourTwo days, on site
    § 0606 / 08

    What it does not do.

    Worth knowing before the review, not after the contract.

    1. 01

      It does not block access.

      It records it. Keep your access controls; Signal Nine tells you what they let through.

    2. 02

      It does not read row contents.

      It records which rows were touched, never what is in them.

    3. 03

      It does not replace backups.

      The ledger proves what happened. Your backups put things back.

    4. 04

      It does not call home when air-gapped.

      No licence check, no telemetry, no update pings.

    § 0707 / 08

    Priced per node. That's all.

    TeamScaleAir-gapped
    NodesUp to 2021 and upAny
    Per node, per month€40€30Annual licence
    Retention2 years10 years10 years
    SupportEngineers, next working dayEngineers, 4 hoursNamed engineer

    Every plan includes the full ledger, the console and the API. No per-query or per-seat charges.

    § 0808 / 08

    Talk to an engineer, not a sales team.

    A 30-minute technical review: bring your architecture, we bring the spec and answer every question on the record.

    Technical reviewreview@signal-nine.example
    Security disclosuressecurity@signal-nine.example

    6E1A 93C0 47B2 D815 0F9C 2A7E 5D30 B19F 84C6 0E52

    Office

    Unit 9, Ferrow Yard
    Kestle