Hospital IT
What does Inhold need from our AWS account?
A Terraform module your team applies: Postgres in private subnets on your KMS key, anchors in S3 with Object Lock, VPC endpoints and no internet egress. It has not been run in a real AWS account yet.
Inhold is being built. No customers yet. The AWS install's Terraform passes CI checks but has not been run in a real AWS account. Repo goes public 9 Nov 2026.
What it creates
Built to install in your own AWS account
Database
Postgres 16 on RDS in private subnets, storage encrypted with a KMS key you create and own, TLS required with a pinned CA. Automated backups kept 14 days by default, plus a final snapshot on destroy.
Anchors
Signed chain anchors in S3 with Object Lock for audit_retention_days (90 by default). An HMAC key in KMS signs them; KMS does not rotate HMAC keys on its own.
Network
VPC interface endpoints and the S3 gateway endpoint only. No NAT gateway, no internet gateway, no proxy. Images come from a registry you mirror.
Sign-in
People use OIDC with a pinned JWKS from your IdP. Agents use an IAM role with a presigned STS request, accepted for up to 120 seconds. Static tokens are for a laptop only.
What it never does
Nothing leaves your account
No egress
No telemetry, no license check, no update check, no call home. A test in the repo fails the build if any code path tries.
No shared tenancy
One install per customer, in that customer's account. Inhold the company has no account in it and no entry in the bundle.
Deletion
A delete hides an item at once; purge removes its text after a grace period and keeps a tombstone. Legal hold blocks both. Backups and the final snapshot are outside purge; retention of those is your policy.
Status
What has and has not been run
Today
The AWS install's Terraform passes CI checks but has not been run in a real AWS account. CI runs terraform fmt, validate, tflint and checkov on every change.
Laptop
v0 runs on one machine with SQLite by default. A Postgres store is tested in CI, not yet in a customer account.
Azure and GCP
Not built. Azure is a design note until two Azure-only buyers are named.