You own the data
Foundry holds your operation inside a vendor’s cloud. Marsovius runs on your hardware, in your jurisdiction — the house never receives a copy of your data, your ontology, or your lineage.
Sovereign data infrastructure·Apache 2.0·Built in Europe
Foundry was the question. We are the answer in the open.
Marsovius is the open-source Palantir Foundry alternative — the operational platform that gives every institution, from a single online shop to a sovereign government, the same ontology, the same digital twin, the same auditable predictions, the same code.
And, when you want one, the same legate of the house sitting beside your team.
— I —
Palantir proved that an operational platform can change how a ministry, a hospital, a fleet command — or a shop with twenty branches — actually works. What it has not done is open the foundations. Marsovius does.
Why open source
The open-source Palantir Foundry alternative. Same category. Different terms.
Foundry made the case that an operational platform — ontology, pipelines, workflows, agents, a digital twin — changes how an institution works. Marsovius gives you the same category without surrendering the keys: you keep the data, the code, and the right to leave.
No lock-in
There is no proprietary format to be trapped in and no contract that owns your exit. Stop paying for support and keep running the open-source platform, with your customisations, on your own infrastructure.
Self-hosted by default
Kubernetes, bare metal, or fully air-gapped. The same code that runs a single online shop runs a sovereign ministry. No SaaS tenancy, no foreign control plane, no telemetry leaving your perimeter.
Transparent to the core
Apache 2.0 from foundation to surface. Every algorithm that governs a decision is inspectable, auditable and forkable by your engineers — and reviewable by your regulator on request.
The architecture
Five layers. One contract.
Marsovius is not a single product. It is a stack of five layers that share one semantic contract — the ontology — and operate together as a single system of truth across the institution.
- V
Surfaces
The operator-facing applications. Workspaces, case files, operational HUDs, storefront surfaces. Built on the ontology so that every interaction is bound to a contract.
- IV
Agents
Assisted and autonomous decision agents. They cannot operate outside the ontology — every action is typed, traced, and revocable.
- III
Workflows
Long-running, versioned business processes. Each step transition is signed. Each branch is replayable. Each rule is reviewable in court.
- II
Ontology
The semantic core. Objects, relationships, allowed actions. The shared contract that a thousand workers — or a single shopkeeper — agree to when they say "patient", "order", "asset".
- I
Pipelines
Source-of-truth ingestion and transformation. Lineage from the raw source to the leaf field. Every transformation auditable, every dataset attributable.
Capabilities
The four capabilities of an operational platform.
Ontology is the contract. The digital twin is the live shadow of the operation. Predictions are bound by the ontology. Agents act only through it.
Ontology
The contract of meaning.
A versioned, typed semantic model of every object the institution cares about — subject, order, asset, branch, outcome — and the actions allowed on them. Every dashboard, every workflow, every agent acts through this contract.
- · versioned types
- · typed actions
- · lineage-aware
- · reviewable as code
Digital twin
A live shadow of the operation.
Marsovius keeps a continuous digital replica of the physical world: a warehouse, a fleet, a hospital floor, a population. The twin is queried like data, simulated like a model, and synchronised in both directions in real time.
- · bidirectional sync
- · scenario simulation
- · what-if branches
- · event-time replay
Predictions
Forecasts bound by the ontology.
Demand, risk, capacity, throughput, mortality, congestion. Forecasts are first-class objects in the ontology — their inputs are traceable, their confidence is published, and the action they trigger is signed.
- · traceable inputs
- · published confidence
- · human-in-the-loop
- · signed actions
Agents
Bounded by the ontology.
Assisted and autonomous agents that cannot operate outside the ontology. Every tool call is typed. Every action is signed. Every capability is scoped by policy and revocable by the institution at any moment.
- · typed tools
- · capability scopes
- · signed actions
- · revocable in one call
The Legates
We do not sell a tool. We send a person.
A legate of Marsovius — Latin legatus, the senatorial governor of a Roman province — is a senior engineer of the house sent to the customer's premises to install the platform, design the ontology, train the operators, and remain as counsel. Setup, training, advisory, companionship. Included in the relationship.
Setup
The legate installs Marsovius in your environment, connects it to your existing systems, designs the first ontology with your subject-matter experts, and stands up the first workflows. From kickoff to first production decision: six to twelve weeks.
Training
The legate transfers every skill they use to the customer’s engineers, data teams and operators. Marsovius is not a black box and the training is not a course. Within ninety days the customer’s team runs the platform without house involvement.
Counsel
The legate remains as a standing advisor for architectural decisions, ontology evolution, model selection and incident response. The counsel is not billed by the hour. It is included in the relationship.
Companionship
The legate stays attached to the customer for twelve months at minimum. They attend design reviews, sit on architecture councils, and represent the house when the customer’s regulator asks how a decision was made.
The four pillars
.01
Sovereign
Deployed on your hardware, in your jurisdiction, under your law. The data and the code remain where your sovereignty does.
.02
Open
Apache 2.0, from foundation to surface. Every algorithm that governs a decision is inspectable, auditable, forkable by your engineers.
.03
Operational
Not a dashboard. Ontology, pipelines, workflows, agents, twin. The architecture that makes everyone act on the same truth.
.04
European
Designed in Europe, hardened against the standards that govern hospitals, ministries, and defense procurement on this continent.
For whom
From a single online shop to a sovereign government.
The same architecture serves a shop with one branch and a state with sixty ministries. The licence does not change. The ontology grows. The code is the same.
- 01
Online commerce
A single shop.
▸ 1 – 50 operators
A storefront unifies its catalogue, its orders, its inventory and its customer support into one ontology. Predictions of demand drive replenishment. A digital twin of the warehouse keeps stock honest. Self-hosted on a single node — or run with a legate beside the team.
- 02
Small & mid-market
A growing company.
▸ 50 – 2 000 operators
A manufacturer, a logistics operator, a regional retailer with twenty branches. Marsovius replaces the patchwork of spreadsheets, ERPs and BI tools with one operational layer. A legate installs the platform and stays as counsel for the first year.
- 03
Public health
A hospital network.
▸ 2 000 – 30 000 operators
A regional health authority unifies six EHRs, two registries, and a clinical-trial pipeline. Outcomes are read by every clinician from the same definition of "patient". A clinical-data-architect legate designs the ontology with the chief medical officer.
- 04
Ministry & administration
A national institution.
▸ 10 000 – 250 000 operators
A tax authority replaces three legacy intake systems with one workflow layer. Each decision is bound to a versioned rule and reviewable in court. The digital twin of the population is held inside the national perimeter. A legate sits on the architecture council.
- 05
Defense & sovereign
A force command.
▸ air-gap · classified
A defense organisation runs Marsovius on a sovereign cloud, air-gapped where required. Source is held in an EU repository. The audit chair holds the keys. Cleared legates remain on premises for the duration of the engagement.
What we replace
The category is right. The form of delivery is not.
| Vendor | Source model | Deployment | Ontology layer | Sovereignty |
|---|---|---|---|---|
| ○Palantir Foundry | Closed | SaaS / on-prem | Yes | US-controlled |
| ○Snowflake / Databricks | Closed | SaaS | No | US-controlled |
| ○dbt · Airflow · Dagster | Open | Self-hosted | No | Variable |
| ●Marsovius | Apache 2.0 | Self-hosted | Yes | EU / customer |
Marsovius is the only entrant that combines the operational-platform category with an open-source licence and a European sovereignty commitment.
Editions
One codebase. Three postures.
The same source under Apache 2.0 — community, professional, or sovereign. The code is identical. What changes is the relationship the house enters into, and the legate it sends.
01 · free
Community
Apache 2.0 · self-hosted
The full platform. No licence cost. No registration. Used by a single online shop or a research lab the same way it is used by a hospital network in production.
- ·full source
- ·all capabilities
- ·community support
- ·no telemetry
02 · commercial
Pro
Per institution · no list price
Production hardening, professional support, named SLAs, security review, and a legate of the house for setup, training, and counsel throughout the first year of deployment.
- ·a legate, included
- ·production SLAs
- ·security review
- ·long-term branches
03 · pact— sealed —
Sovereign
Subject to the Pact of Sovereignty
The most binding posture the house offers. Cleared legates on premises, air-gap-capable deployment, source in EU registries, and audit-grant access to the customer’s supervisory authority.
- ·Pact of Sovereignty
- ·cleared legates on premises
- ·air-gap capable
- ·audit-grant access
— II —
The same operational truth for the smallest shop and the largest state. The same code. The same audit. The same right to leave with everything.
We do not publish prices. We accept audiences.
— Marsovius · MMXXVI —
— III —
Inspect the source. Engage a legate. Or request an audience.
Marsovius is free to inspect, fork, and self-host under Apache 2.0 — by any organisation, of any size, in any jurisdiction. For installation, training, counsel and the Pact of Sovereignty, the four desks below answer within three working days.
Institutions
audience@marsovius.comLegates of the house
legates@marsovius.comDefense & sovereign
sovereign@marsovius.comPatronage & alliances
house@marsovius.com