bayata Nexus
Sovereign control for AI, infrastructure, and institutional governance - on hardware you own.
Sovereignty by Choice
The bayata Nexus Suite
One architecture to run, secure, and operate your institution end-to-end. Everything on infrastructure you own.
For Sovereignty by Choice essays, programme framing, and field perspectives that sit alongside Nexus, see sovereigntybychoice.com.
Nexus Mail
Communication
Institutional email on your own server and domain. Webmail, desktop client, and mobile sync. Fully offline-capable. Replaces Gmail and Outlook permanently.
Click for scope and next steps
Nexus Mail
Communication
Institutional email on your own server and domain. Webmail, desktop client, and mobile sync. Fully offline-capable. Replaces Gmail and Outlook permanently.
Click for scope and next steps
Covers DNS and TLS, mailbox migration, archives, and mobile profiles. You receive runbooks for daily operations, restores, and adding domains without vendor lock-in.
Nexus Files
Storage
Sovereign file storage with local sync to field devices. All files available offline, pushed back to server on reconnect. No Google Drive. No OneDrive.
Click for scope and next steps
Nexus Files
Storage
Sovereign file storage with local sync to field devices. All files available offline, pushed back to server on reconnect. No Google Drive. No OneDrive.
Click for scope and next steps
Defines libraries, retention, sharing rules, and offline sync boundaries for field teams. Policies stay under your control with audit trails on your metal.
Nexus Office
Productivity
Full document, spreadsheet, and presentation suite on your server. Fully brandable. 100% functional without internet. Replaces Google Docs and Microsoft 365.
Click for scope and next steps
Nexus Office
Productivity
Full document, spreadsheet, and presentation suite on your server. Fully brandable. 100% functional without internet. Replaces Google Docs and Microsoft 365.
Click for scope and next steps
Includes branded templates, collaborative editing on LAN or VPN, and export formats your workflows already use. No subscription tiers tied to a foreign cloud.
Nexus Comms
Messaging
Encrypted institutional messaging with channels, direct messages, and file sharing. Runs over office LAN without internet and over central VPN for remote access.
Click for scope and next steps
Nexus Comms
Messaging
Encrypted institutional messaging with channels, direct messages, and file sharing. Runs over office LAN without internet and over central VPN for remote access.
Click for scope and next steps
Channels and DM with attachments, searchable history on your server, and optional air-gapped LAN-only operation. Remote staff use the same stack over central VPN.
Nexus Calendar
Scheduling
Shared team calendars, meeting rooms, and contact directories on your server. Syncs to all staff devices. No data leaves your infrastructure.
Click for scope and next steps
Nexus Calendar
Scheduling
Shared team calendars, meeting rooms, and contact directories on your server. Syncs to all staff devices. No data leaves your infrastructure.
Click for scope and next steps
Room resources, delegation, and directory-backed invites with sync to approved devices. Availability stays inside your tenant without external calendar graphs.
Nexus Meet
Video Conferencing
HD video conferencing on your own infrastructure. External participants join via browser link with no account required. Recordings stored on your server. Replaces Zoom and Google Meet.
Click for scope and next steps
Nexus Meet
Video Conferencing
HD video conferencing on your own infrastructure. External participants join via browser link with no account required. Recordings stored on your server. Replaces Zoom and Google Meet.
Click for scope and next steps
Self-hosted bridges, recording retention on your disk, and guest links that do not create shadow accounts. Capacity scales with hardware you already bought.
Nexus AI
Artificial Intelligence
Private AI: a 13-billion-parameter quantised field model per device and a shared 70-billion-parameter server model. Pre-loaded with your document archive. No data ever leaves your infrastructure.
Click for scope and next steps
Nexus AI
Artificial Intelligence
Private AI: a 13-billion-parameter quantised field model per device and a shared 70-billion-parameter server model. Pre-loaded with your document archive. No data ever leaves your infrastructure.
Click for scope and next steps
Model choice and quantisation are tuned to your GPUs or CPUs, with update policies and corpus boundaries you approve. Inference never leaves your network path.
Nexus Intelligence
AI Agents
Pre-configured research and operational agents, filtered AI search across your document corpus, automated report pipelines, and structured analysis. Runs on your server.
Click for scope and next steps
Nexus Intelligence
AI Agents
Pre-configured research and operational agents, filtered AI search across your document corpus, automated report pipelines, and structured analysis. Runs on your server.
Click for scope and next steps
Agents connect to approved corpora only, with workflow hooks for reports and QA checkpoints. Prompt packs and filters are maintained on your side.
Nexus Field
Field Operations
Offline-first survey and data collection. Forms function without internet. Results sync to your own research database on reconnect. Replaces Google Forms and SurveyMonkey.
Click for scope and next steps
Nexus Field
Field Operations
Offline-first survey and data collection. Forms function without internet. Results sync to your own research database on reconnect. Replaces Google Forms and SurveyMonkey.
Click for scope and next steps
Form schemas, validation, and sync queues for interrupted connectivity. Data lands in your research database with lineage you can evidence to donors or regulators.
Nexus Web
Web Presence
Your website hosted on your own server. Full CMS for independent management. No foreign platform dependency for your public presence.
Click for scope and next steps
Nexus Web
Web Presence
Your website hosted on your own server. Full CMS for independent management. No foreign platform dependency for your public presence.
Click for scope and next steps
CMS roles, staging, and publication checks run locally. Optional integration with Nexus Mail for transactional messaging from the same estate.
Nexus DNS
Network Security
Institution-owned name resolution. No DNS queries leak to Google, Cloudflare, or any third-party resolver. Internal addresses work on the local LAN without internet.
Click for scope and next steps
Nexus DNS
Network Security
Institution-owned name resolution. No DNS queries leak to Google, Cloudflare, or any third-party resolver. Internal addresses work on the local LAN without internet.
Click for scope and next steps
Split-horizon zones for intranet names, DNSSEC where appropriate, and resolver logging without sending queries to public providers by default.
central VPN
Network Security
Encrypted private network connecting your office server, remote nodes, field devices, and staff. All traffic encrypted end-to-end. Unique credentials per user.
Click for scope and next steps
central VPN
Network Security
Encrypted private network connecting your office server, remote nodes, field devices, and staff. All traffic encrypted end-to-end. Unique credentials per user.
Click for scope and next steps
Topology covers hub site, remote offices, and field laptops with per-user keys and posture checks. Changes are staged with rollback paths.
Nexus Vault
Backup and Recovery
3-2-1 backup and disaster recovery. Daily snapshots, nightly offsite sync via central VPN, point-in-time recovery to any snapshot from the last 30 days.
Click for scope and next steps
Nexus Vault
Backup and Recovery
3-2-1 backup and disaster recovery. Daily snapshots, nightly offsite sync via central VPN, point-in-time recovery to any snapshot from the last 30 days.
Click for scope and next steps
Snapshot schedules, encrypted offsite targets over central VPN, and restore drills documented per application. Retention aligns with your compliance duties.
Central Station ERP Suite
Institutional Management
bayata's institutional management platform covering accounting, HR, procurement, project tracking, and grant management. Runs on your own server.
Click for scope and next steps
Central Station ERP Suite
Institutional Management
bayata's institutional management platform covering accounting, HR, procurement, project tracking, and grant management. Runs on your own server.
Click for scope and next steps
Finance, HR, procurement, grants, and projects on one deployable stack with exports your auditors expect. Start with a scoped pilot and expand modules gradually.
TimeSet
Time and Project Tracking
Staff time tracking, project hour allocation, and reporting integrated with Central Station ERP. Designed for NGO project reporting and donor accountability.
Click for scope and next steps
TimeSet
Time and Project Tracking
Staff time tracking, project hour allocation, and reporting integrated with Central Station ERP. Designed for NGO project reporting and donor accountability.
Click for scope and next steps
Captures effort against programmes and donors with approvals baked in. Works with Central Station ERP for consolidated reporting.
Operating System Layer
Nexus OS
Where hardware allows, bayata deploys a hardened Nexus OS configuration on field and server devices for maximum security and sovereignty. Where existing Windows or macOS devices are in good condition, the full Nexus stack runs as applications on the existing OS - maintaining all security guarantees without a full OS replacement. The correct approach is determined per device during the sovereignty audit.
Click for scope and next steps
Assessed per deployment
Operating System Layer
Nexus OS
Where hardware allows, bayata deploys a hardened Nexus OS configuration on field and server devices for maximum security and sovereignty. Where existing Windows or macOS devices are in good condition, the full Nexus stack runs as applications on the existing OS - maintaining all security guarantees without a full OS replacement. The correct approach is determined per device during the sovereignty audit.
Click for scope and next steps
Rollout follows a sovereignty audit: device inventory, threat model, and a phased cutover plan. bayata documents architecture, backup and restore drills, and trains administrators before sign-off.
Book an OS readiness reviewWhat Nexus Replaces
Compare incumbent tools with Nexus Suite coverage
| You currently use | Category | Nexus replaces it with |
|---|---|---|
| Gmail / Outlook | Nexus Mail | |
| Google Drive / OneDrive | File Storage | Nexus Files |
| Google Docs / Microsoft 365 | Productivity | Nexus Office |
| Google Calendar | Scheduling | Nexus Calendar |
| WhatsApp / Teams / Slack | Messaging | Nexus Comms |
| Zoom / Google Meet | Video Conferencing | Nexus Meet |
| ChatGPT / Google NotebookLM | AI Tools | Nexus AI + Nexus Intelligence |
| Google Forms / SurveyMonkey | Field Data | Nexus Field |
| Wix / WordPress (hosted) | Web Presence | Nexus Web |
| Commercial VPN / Public DNS | Network Security | central VPN + Nexus DNS |
| Cloud backup services | Backup | Nexus Vault |
| Accounting / HR SaaS tools | Institutional Management | Central Station ERP Suite + TimeSet |
Ready for sovereignty by design?
Talk to bayata about architecture, audit, and phased rollout.
Contact