[
    {
        "id": "privacy-first-stack",
        "visible": true,
        "name": "Privacy-First Stack",
        "description": "A layered architecture designed not just for productivity, but for resilience, privacy, and digital sovereignty by design.",
        "tags": ["Open Source"],
        "products": [
            { "ref": "mariadb", "name": "MariaDB", "role": "Database Server", "logo": "/assets/logo_mariadb_foundation_horizontal.png", "link": "https://www.mariadb.org" },
            { "ref": "nextcloud", "name": "Nextcloud", "role": "Collaboration Platform", "logo": "/assets/logo_nextcloud.png", "link": "/storage-collab/nextcloud" },
            { "ref": "passbolt", "name": "Passbolt", "role": "Secrets & Credentials Management", "logo": "/assets/logo_passbolt.svg", "link": "/password-management/passbolt" }
        ],
        "details": {
            "sections": [
                {
                    "title": "About the Privacy-first stack",
                    "content": [
                        "In a world where data breaches are no longer if but when, the way we design our infrastructure matters more than ever. Too often, organizations rely on convenience-driven architectures that mix sensitive data, credentials, and collaboration tools into a single layer—creating a single point of failure.",
                        "There's a better approach: a privacy-first stack built on separation, encryption, and control. At the heart of this model sits MariaDB, powering two complementary systems, Nextcloud and Passbolt."
                    ]
                },
                {
                    "title": "Why this stack?",
                    "content": [
                        "Combining Nextcloud, Passbolt, and MariaDB in a self-hosted, layered open-source architecture gives organizations direct control over their data and access boundaries. This design reduces the attack surface inherent in fragmented SaaS environments, simplifies compliance by keeping sensitive data on-premise, and removes dependency on external providers — resulting in a collaboration environment built around privacy, separation of concerns, and long-term digital sovereignty."
                    ]
                },
                {
                    "title": "Architecture diagrams",
                    "type": "images",
                    "content": [
                        { "src": "/assets/stacks/privacy-stack-components_testing.png", "caption": "Same server deployment" },
                        { "src": "/assets/stacks/privacy-stack-components.png", "caption": "Each component with their own system" },
                        { "src": "/assets/stacks/privacy-stack-components_alt.png", "caption": "HA with Galera Cluster" }
                    ]
                },
                {
                    "title": "MariaDB Server: The core",
                    "content": [
                        "MariaDB Server is an open-source relational database management system, developed as a community-driven fork of MySQL. It is designed to store, organize, and retrieve structured data efficiently, supporting a wide range of applications from small websites to large-scale enterprise systems.",
                        "In a collaborative environment, MariaDB Server plays a foundational role by acting as a shared data backbone: multiple users, applications, or services can access and manage the same datasets reliably and concurrently. This enables teams to build data-driven applications, maintain consistency across systems, and collaborate on projects that depend on accurate, centralized information."
                    ]
                },
                {
                    "title": "Nextcloud: Collaboration",
                    "content": [
                        "Nextcloud is an open-source platform that provides a suite of tools for file storage, sharing, and team collaboration. It allows organizations to maintain full control over their data while offering features such as file synchronization, document editing, calendars, and communication tools.",
                        "In a collaborative environment, Nextcloud acts as a centralized hub where team members can securely access, share, and work on files in real time, improving coordination and productivity. Its flexibility and privacy-focused design make it especially useful for teams that need a secure alternative to public cloud services while maintaining efficient collaboration."
                    ]
                },
{
                    "title": "Passbolt: Security & Access",
                    "content": [
                        "Passbolt is an open-source password management platform designed specifically for teams. It allows organizations to securely store, manage, and share credentials (such as logins, API keys, and secrets) with strong end-to-end encryption.",
                        "In a collaborative environment, Passbolt plays a key role by enabling team members to share access to systems without exposing passwords in plain text, ensuring both security and accountability. It also helps streamline onboarding and offboarding processes, centralize access control, and maintain audit trails—making it especially valuable for IT teams, developers, and businesses that need to coordinate securely across multiple users and systems."
                    ]
                },
                {
                    "title": "Docker Compose Deployment Example",
                    "type": "code",
                    "collapsible": true,
                    "src": "/assets/stacks/privacy-first-stack/docker-compose.yml"
                }
            ]
        }
    },
    {
        "id": "sovereign-multi-cloud-db-stack",
        "visible": true,
        "name": "Sovereign, Multi-Cloud Database Stack",
        "description": "An open database, running across sovereign, multi-cloud infrastructure, bound by a centralised operational layer, and with no single vendor owning any part of the stack.",
        "tags": [],
        "products": [
            { "ref": "mariadb", "name": "MariaDB", "role": "Database Server", "logo": "/assets/logo_mariadb_foundation_horizontal.png", "link": "https://www.mariadb.org" },
            { "ref": "emma", "name": "emma", "role": "Operational Layer", "logo": "/assets/logo_emma.png", "link": "/cloud-hosting/emma" }
        ],
        "details": {
            "sections": [
                {
                    "title": "About the Multi-Cloud Database Independence stack",
                    "content": [
                        "At its core, the Sovereign, Multi-Cloud Database Stack is a simple idea made operational: an open database, running across multiple sovereign cloud providers, bound by a centralised operational layer, and with no single vendor creating dependency at any layer.",
                        "MariaDB Server is the open, community-governed continuation of the MySQL lineage — default in every major Linux distribution, proven at scale, drop-in compatible for MySQL-family workloads, and built for where databases are going next, with native vector search built in. It is fully open source, with a transparent, community-driven roadmap.",
                        "emma acts as the operating layer between database instances and their underlying infrastructure. It consistently deploys, governs, and operates that database across clouds.",
                        "European sovereign cloud providers — IONOS, OVHcloud, Hetzner and their peers — are the infrastructure underneath: independent, EU-jurisdictional, and genuinely portable. Not a hyperscaler region dressed up as sovereign. The real thing.",
                        "Together, they form a stack where the database is open, the infrastructure is distributed, and the operating layer holds governance across both."
                    ]
                },
                {
                    "title": "The challenge",
                    "content": [
                        "For a decade, enterprises running MySQL-family databases made a quiet tradeoff: accept that Oracle controls your database roadmap, or invest in complex migrations.",
                        "That tradeoff is now coming due. MySQL development under Oracle has slowed. Enterprises watching the roadmap are asking who actually owns the critical infrastructure layer.",
                        "The answer, for most of them, is: one vendor. One roadmap. One point of failure, which is commercial rather than technical.",
                        "The same question is playing out one layer up. Cloud providers have built managed database services and have simplified operations, often at the cost of deeper infrastructure dependency.  And when regulatory pressure, data residency requirements, or a commercial dispute forces the question, the cost of getting out is enormous.",
                        "This is why we built the Sovereign, Multi-Cloud Database Stack."
                    ]
                },
                {
                    "title": "Why this matters",
                    "content": [
                        "The MySQL question is forcing enterprises to look for an open path forward. MariaDB is the natural answer — battle-tested, and already running in more infrastructure than most enterprises realize.",
                        "At the same time, the EU regulatory environment — GDPR, NIS2, DORA, the AI Act — is making data residency an operating requirement. Sovereign cloud infrastructure is becoming the default posture for regulated industries and anyone who reads the direction of travel.",
                        "The hyperscalers claim to solve both problems. Their answer is a sovereign-labelled cloud region and a managed service on their infrastructure, both governed by their terms and optimized for their ecosystem. The dependency doesn't disappear. It just moves up the stack and becomes harder to see.",
                        "The Sovereign, Multi-Cloud Database Stack offers a different answer: openness at the database layer, flexibility at the infrastructure layer, and operational coherence across both. It replaces more abstractions with an operating model that actually runs in production."
                    ]
                }
            ]
        }
    }
]