The full governed quant workflow platform — deterministic analytics, approval gates, audit trail, committee-ready reports — deployed on your domain, in your Azure tenant, with your name on it. Your clients never see Nexqion.
All governance properties are preserved under your brand: deterministic reproducibility, full audit chain, approval gates, and compliance-ready PDF output. You are not buying a reskin — you are deploying an enterprise governance engine.
Regulatory basis: SR 11-7 · EU AI Act · ESMA 2024 · GDPR / Schrems II. Data sovereignty is structural — your client data stays inside your Azure tenant by design.
Fund administrators
Offer a governed analytics layer to all your fund clients under your own brand. One deployment, hundreds of end clients — each with isolated data.
Wealth platforms
Embed institutionalgrade risk and reporting workflows into your existing platform. Compliance-grade output without rebuilding your analytics stack.
Investment advisory platforms
Give your network of investment advisers a fully branded analytics copilot. Looks like an internal tool. Governed, auditable, and reproducible like an enterprise system.
architecture
From Nexqion delivery to your branded platform, running in your infrastructure.
01
Your brand layer
Domain, logo, company name, agent name — all from environment config. Zero code changes.
02
Your Azure tenant
API, worker, storage, and database run inside your subscription. Nexqion has no access to your data.
03
Your identity provider
Users log in via your Microsoft Entra or existing SSO. Full role-based access control.
Brand config
Set NEXT_PUBLIC_BRAND_* environment variables: company name, agent display name, tagline. Applies globally across all UI screens in one place.
Domain + DNS
Point your subdomain (e.g. analytics.yourbrand.com) to the deployed frontend. TLS certificate provisioned automatically via Azure.
Azure tenant
Deploy API and worker containers into your Azure subscription. Storage, queue, and database stay inside your tenant boundary — no cross-tenant data movement.
Identity
Connect your Microsoft Entra External ID or existing IdP. Users authenticate against your identity provider, not Nexqion's.
Client data stays inside your Azure tenant
No cross-tenant routing. No Nexqion access. No exceptions.
Azure Blob Storage
All uploaded datasets, artifacts, and PDFs stored in your subscription.
PostgreSQL
Run state, approvals, audit trail — all in a database you own and control.
Container Apps
API and worker run in your Azure Container Apps environment. You manage the runtime.
Platform operators
We handle the deployment. You own the brand, the domain, the data, and the client relationship. Tell us about your use case and we will walk you through the setup.