Effective date: October 21, 2026.
Signed release 1.1.6 supports either a dedicated operator-managed AMD64/x86-64 Linux server with cgroup v2, a security-supported kernel, Docker Engine 28.x, and Docker Compose v2.40 or later, or the accepted Windows 11 Pro/Enterprise x86-64 production profile using Docker Desktop’s WSL2 Linux-container backend.
Recommended starting capacity
- 8 CPU cores
- 16 GiB RAM
- 250 GiB durable SSD-backed storage
- At least 25% free durable storage maintained during operation
- Dedicated public hostname and publicly trusted TLS certificate
- Outbound HTTPS for licensing and customer-selected email and AI providers
- Customer-controlled encrypted backup media and age/X25519 recovery identity
- Current stable Chrome, Edge, Firefox, or Safari for users
Actual capacity depends on evidence volume, concurrent document generation, malware scanning, database history, and retention requirements. Larger teams should validate representative workload and recovery performance before production use.
Accepted Windows production profile
Windows production requires Windows 11 Pro or Enterprise build 22631 or later with current security support, x86-64 hardware, hardware virtualization, the Windows hypervisor, WSL2, a currently supported Docker Desktop release, and Linux-container mode. It runs the same exact immutable Linux images as the Linux profile. Docker Desktop’s separate license terms apply.
Windows Home, Windows Server, native Windows containers, macOS production, Kubernetes, Podman, Docker Swarm, NAS application stores, ARM64, direct dependency installs, shared hosting, and modified deployment images remain unsupported unless a separate complete acceptance profile is published.
PostgreSQL, ClamAV, application port 3000, evidence storage, and container-management sockets must remain private. A production installation must pass configuration preflight, readiness, private workflow acceptance, encrypted backup verification, isolated restore, public TLS and header validation, identity-email acceptance, and rollback recording before it receives customer data.