Synthetic environment

Production-shaped workflows, safe fixtures, and no operational endpoints.

3Products9Core workflows12Interactive states
INTERACTIVE PRODUCT DEMOS

Mission control for safe product demos

Move between governed transfer, tenant operations, and orchestration decisions in one controlled route. Every surface uses synthetic data and sanitized operating context.

Pick & Drop: intake, policy, evidence, replayMSPStudio: tenant ops, SLA, onboarding, ticketsConsensus: quorum, execution gates, audit trail
3Products
9Core workflows
12Governance gates
Safe showcase guardrails

Identifiers, routes, and telemetry are representative only. The demos deliberately avoid customer data, operational endpoints, and reusable control-plane logic.

Active scenarioOperations day

Pick & Drop — File Transfer Demo

Governed transfer across Windows, Linux, SFTP, HTTP(S), Azure, and S3 with policy enforcement, audit continuity, and end-to-end encryption.

See how a production-shaped transfer lane stays controlled across Windows, Linux, Azure, S3, and enterprise protocols without exposing live endpoints or reusable runtime logic. Use the demo to reject a file, replay a delivery, and inspect the evidence chain on safe synthetic data.

Governance window

Window enforced for every governed transfer below.

Tenant scopetenant ops-se-01
Active windowApr 20 14:00–18:00 UTC
Policy bundlepolicy-bundle/gov-eu-2026-04
Trusted counterparties4 trusted lanes
Retention class7y signed receipts

Policy bundle promotion

Demo view of how policy bundles graduate from draft to active across environments.

  1. 01
    devdraft
    policy-bundle/gov-eu-2026-05-rc.12026-04-26 09:14
  2. 02
    stagestaged
    policy-bundle/gov-eu-2026-042026-04-22 11:02
  3. 03
    prodactive
    policy-bundle/gov-eu-2026-032026-04-04 06:48
Governed transfers14 827
Protected volume412 GB
Successful deliveries67%
Replay-ready chains3
Content classification ribbon

Demo classifier results that drive routing, encryption, and retention without exposing the real classifier.

  • PIIroute: encrypted lane
  • PCIroute: signed lane
  • IP-confidentialroute: scoped lane
  • Publicroute: open lane

Synthetic distributions only. Real classifier fingerprints are never displayed.

Governed transfer surface

Operators can stage files, inspect route posture, replay receipts, and confirm every transfer across SFTP, HTTP(S), Azure, and S3 lanes before delivery.

2 Queued2 Signed receipts1 rejected
Governance posture
Policy windows: 24/7Signed receipts: 3Escalations: 1
Transfer lane posture
RouteERP/Outbox → Partner/SFTP
Throughput38 MB/s peak
Status67% success rate
Evidence continuity
Signed receipts3
Audit Trail3 replay-ready chains
Throughput3.3 MB/h
Exception focus
Exception lane1
Transfer Queue2 queued
Last active< 1 min ago
Governed transfer surfacesensor-telemetry-0420.json
IoT/Gateway -> DataLake/Landing12.1 MB · Transferring
Audit continuity0 Signed receipts
Audit Trail12.1 MB transferred
Next operator moveWatch delivery progress and keep the evidence lane open until the retained receipt is written.
1 active2 Queued

Transfer lane board

Synthetic deliveries move between priority, active, and exception lanes without touching live endpoints.

Priority intake2
Active & cleared3
Exceptions & replay3

Counterparty telemetry

Sanitized lane health, route posture, and throughput snapshots for the current transfer estate.

nordic-billing-lane
SFTP + mTLS
RouteERP/Outbox -> Partner/SFTP
Throughput38 MB/s peak
Status99.94% receipts intact
tenant-evidence-relay
HTTPS relay
RouteCompliance/Archive -> Auditor/Secure
Throughput12 signed bundles/h
Status2 replay chains waiting
telemetry-intake-gateway
JSON ingest
RouteIoT/Gateway -> DataLake/Landing
Throughput4.1 GB/h sustained
Statusqueue depth 3 lanes
Counterparty trust posture
nordic-billing-laneTrust score92/100
Attestation freshness
96
Receipt density
91
Exception rate
88
tenant-evidence-relayTrust score78/100
Attestation freshness
82
Receipt density
71
Exception rate
74
telemetry-intake-gatewayTrust score84/100
Attestation freshness
80
Receipt density
86
Exception rate
79

Counterparty topology

Synthetic partners across SFTP, API, S3, and relay lanes with attestation freshness.

  • partner-eu-01SFTP laneeu-north-1184 flows/hattested
  • partner-eu-04API gatewayeu-west-1412 flows/hattested
  • partner-na-02S3 bucketus-east-196 flows/hrotation due
  • partner-eu-09Edge relayeu-central-158 flows/hattested

Operator event feed

Synthetic transfer and evidence events are retained for demo review only.

Signed audit receipt stored — retention: 7 years
invoice-batch-042.csv · replay available
14:36
Transfer rejected — file quarantined
malware-report.exe · quarantined for operator review
14:34
Policy check passed — 4/4 rules satisfied
sensor-telemetry-0420.json · route pressure normalized
14:32
AES-256-GCM encryption applied
contract-renewal-q2.pdf · delivery window sealed
14:28

Policy bundle history

Signed governance bundles are retained with effective windows so operators can audit which controls applied to any past transfer.

policy-bundle/gov-eu-2026-04
Effective window: Apr 14 → Apr 28
Signed by: sha256:e4f8a1…d49a
Additive changeActive
policy-bundle/gov-eu-2026-03
Effective window: Mar 17 → Apr 13
Signed by: sha256:b71c20…f08e
Breaking changeRolled
policy-bundle/gov-eu-2026-02
Effective window: Feb 18 → Mar 16
Signed by: sha256:9a3df6…41b2
HotfixRolled
policy-bundle/gov-eu-2026-01
Effective window: Jan 20 → Feb 17
Signed by: sha256:1c0d72…85ef
Additive changeArchived

All transfer records, hashes, and destinations shown here are synthetic demo fixtures with no live endpoints or reusable credentials.

Governed transfer control room

Operators can see queue pressure, signed evidence posture, and exception lanes before a file ever reaches a delivery endpoint.

Coverage6 routes in view2 queued / active lanes 1
Audit continuity3 signed outcomes2 delivered with retained receipts
Exception lane1 quarantined transfersException evidence stays attached for replay and operator review.
Queue governance lanes

Separate partner deliveries, evidence exports, and exception work before any transfer starts. The operator can open the active lane directly from the demo.

Policy pack in force

Show the rules that matter on production-shaped routes: extension control, encryption, destination authorization, and retained evidence.

Evidence and replay

Trace one clean delivery from policy pass to retained receipt, then reopen the blocked sample to show the exception chain stays attached.

2
Transferred
67%
Success rate
3.3 MB
Total bytes
01
Stage the governed intake

Jump into the live queue handoff and show how a new inbound file lands on the policy-controlled route before any transport starts.

02
Inspect evidence on a clean delivery

Move directly to a completed transfer and review the signed evidence chain, delivery record, and replay-ready timeline.

03
Revisit a blocked transfer

Show the operator path for a failed policy check, including the rejection reason, replay context, and retained audit trail.

Transfer Queue

6 items · 1 active
📄invoice-batch-042.csvCompleted
ERP/OutboxPartner/SFTP2.4 MB14:32:11
📋contract-renewal-q2.pdfCompleted
Legal/DocsClient/Portal890 KB14:28:44
🔧sensor-telemetry-0420.jsonTransferring
IoT/GatewayDataLake/Landing12.1 MB14:35:02
📊payroll-export-apr.xlsxQueued
HR/SystemFinance/Import1.8 MB
📦audit-evidence-w16.zipQueued
Compliance/ArchiveAuditor/Secure45.2 MB
⚠️malware-report.exerejected
Unknown/UploadInternal/Inbox3.7 MB14:33:50

Transfer Detail

Filesensor-telemetry-0420.json
Size12.1 MB
RouteIoT/GatewayDataLake/Landing
StatusTransferring
EncryptionAES-256-GCM

Policy Checks

Extension whitelistpass
Size limit (100 MB)pass
Encryption requiredpass
Destination authorizedpass
Transferring…67%
Transferred: 8.1 MBSpeed: 4.2 MB/s

Active Policies

Encrypt in transit
Max file size: 100 MB
Allowed extensions whitelist
Retention: 7 years

Transfer Analytics

Throughput3.3 MB/h
Policy hits3

Notifications

14:32:11Transfer completeinvoice-batch-042.csv
14:28:44Transfer completecontract-renewal-q2.pdf
14:33:50Transfer rejected by policymalware-report.exe

Evidence summary

3
Total transfers
1.6 MB
Avg. size
67%
Policy hit rate

Connection health

Partner SFTPLatency: 24ms
Ingest APILatency: 12ms
S3 bucketLatency: 89ms
DSS RelayLatency: 8ms
Turn the demo into a real rollout

Align products and deployment in the evaluation route, then move operators into the governed portal chain.

Pick & Drop Demo — Governed File Transfer Walkthrough | DSS