On-Premise documentation

Natalia Analytics On-Premise Documentation

VM appliance running on your infrastructure. 3 contractual modes depending on your GDPR requirements. No data has to leave your datacenter.

Data sovereignty

Your data stays on your infrastructure. In Strict mode, no outbound connection is required.

3 contractual modes

Strict (no DPA) / +72h Support (light DPA) / Connected (full art.28 DPA). You choose.

GDPR by design

Pseudonymization, RBAC, immutable audit log, GDPR art.17 (right to erasure).

Pick your contractual mode

Three modes, three GDPR postures, one appliance. The choice is yours and reversible: you can move from Connected to Strict at any time without losing data.

Strict Air-gapped +72h Support On-demand tunnel Connected Permanent link
Outbound connectivity None Outbound SSH tunnel, on-trigger only, 72h max Permanent HTTPS to Natalia
DPA art.28 None required (you are sole controller) Light Support DPA, art.28 §3 a-h Full art.28 DPA with sub-processor schedule
Typical use case Bank, mutual, defense, public-sector OIV Mid-market, integrators wanting reactive support Organizations wanting qualitative textual analysis of CDR conversations (Natalia Analytics SaaS)
RFP cycle gain −3 to −6 weeks (no DPA review) −1 to −2 weeks (light DPA) Standard SaaS cycle

Architecture per mode

One appliance, three network postures. The diagram you can show your CISO depends on the mode you pick.

Mode 1

Strict

flowchart TB
    subgraph LAN_S["Your premises"]
        PBX_S["Alcatel PBX"]
        APP_S["Natalia appliance"]
        USER_S["Your teams"]
    end
    PBX_S -.->|Billing tickets| APP_S
    USER_S -->|HTTPS local| APP_S
    style LAN_S fill:#eef2ff,stroke:#6366f1,stroke-width:2px

Zero outbound connection. The appliance never talks to Natalia or the public internet.

Mode 2

+72h Support

flowchart TB
    subgraph LAN_T["Your premises"]
        PBX_T["Alcatel PBX"]
        APP_T["Natalia appliance"]
        USER_T["Your teams"]
    end
    SUPPORT_T["Natalia support"]
    PBX_T -.->|Billing tickets| APP_T
    USER_T -->|HTTPS local| APP_T
    APP_T -.->|On-trigger SSH, 72h| SUPPORT_T
    style LAN_T fill:#eef2ff,stroke:#6366f1,stroke-width:2px
    style SUPPORT_T fill:#fef3c7,stroke:#d97706

Outbound SSH tunnel, opened only on your trigger, closed after 72h. Light Support DPA art.28.

Mode 3

Connected

flowchart TB
    subgraph LAN_C["Your premises"]
        PBX_C["Alcatel PBX"]
        APP_C["Natalia appliance"]
        USER_C["Your teams"]
    end
    CLOUD_C["Natalia Cloud + AI"]
    PBX_C -.->|Billing tickets| APP_C
    USER_C -->|HTTPS local| APP_C
    APP_C -->|HTTPS permanent| CLOUD_C
    style LAN_C fill:#eef2ff,stroke:#6366f1,stroke-width:2px
    style CLOUD_C fill:#dbeafe,stroke:#2563eb

Permanent HTTPS to Natalia. Unlocks Natalia Analytics: qualitative textual analysis of every conversation — recurring topics, customer pain points, agent gaps. Full art.28 DPA, sub-processor schedule.

Inside the appliance

Two screens, two promises kept: the appliance boots in minutes and gives your teams a clean local UI. Nothing leaves your network.

Natalia appliance first-boot login screen

5-step wizard, 30-45 min

Admin password, license, network mode, PBX, first collection. No internet required.

Natalia analytics CDR dashboard: phone taxation statistics, volume per day, inbound/outbound ratio, top callers, duration histogram, cost per extension

CDR analytics dashboard

Volume per day, inbound/outbound ratio, top callers, cost per extension. Accessed via HTTPS on your LAN, role-based.

CISO frequently asked questions

The eight questions we hear most often in security reviews. Every answer is screenshot-friendly.

What outbound connections are made in Strict mode?
None. In Strict mode, the appliance reaches only your PBX (inbound to it) and exposes a local HTTPS UI on your LAN. No NTP, no DNS to public servers, no telemetry, no license check call-home. You can put it behind a default-deny egress firewall.
How does licensing work without internet?
Each license is a cryptographically signed file delivered out-of-band (USB, encrypted email) and validated locally by the appliance. No call-home, no online activation. A grace period covers expiry so collection never stops abruptly. Renewal = paste a new file.
Who can access the data and how is access traced?
Four built-in roles (Viewer, Admin, Auditor, Integrator), each with a least-privilege policy. Viewer only ever sees masked numbers; Admin can reveal a full phone number on demand. Every action — login, query, export, role change, reveal of an encrypted phone number — is recorded in an append-only audit log, signed and exportable to your SIEM.
How does the right to erasure (GDPR art.17) work?
Selective erasure by employee (matched by extension). The operation is irreversible, audited, and produces a signed destruction certificate reporting the number of call records and reveal-log entries deleted. Absent a specific request, data is otherwise kept for the configured retention period (5 years for call records, 3 years for audit logs, by default).
How do I back up the appliance?
Use your hypervisor's native VM snapshot (VMware, Proxmox, Hyper-V) on the data disk. The data disk is logically separated from the system disk so you can roll back the appliance independently. We recommend daily snapshots with 7-day retention.
How do I upgrade without interrupting collection?
Signed update packages are applied in-place: snapshot first, atomic switch, automatic rollback on failure. The data disk is preserved across upgrades. Total downtime is typically under two minutes.
What is the reversibility procedure?
Native export in CSV, Parquet, and JSON. The appliance image is portable across hypervisors. You keep the data even after license expiry; the appliance enters a read-only mode that still allows export.
What audit log granularity is available and can I push it to my SIEM?
Per-event granularity: who did what, when, from which source IP, on which resource. Append-only, cryptographically signed, exportable to syslog or via JSON pull (RFC 5424 compatible). Splunk, ELK, Wazuh, Sentinel and Datadog are all supported.

Last updated :

Suggest an edit