Aspian Cloud is where Aspian Alliance runs the systems it builds for government bodies, regulators and established companies. Your developers deploy in minutes. Your leadership approves risky changes from a phone. Your board and regulator see evidence they can check.
Runs in Lagos, Abuja, London and the EU, or in your own data centre.
guard-roster
Kings Guards, production
Change pushed
3f9c2e1
Add patrol exceptions to incident log
Built and signed
41 s
Image signed, software bill of materials attached
Checks passed
12 s
Secret scan clean, no critical vulnerabilities
Approved by 2 of 2
27 s
Managing director and IT lead, each with a passkey
Migration applied
3 s
Adds one table, backup taken first
Rolled out
58 s
Healthy at 100% of traffic in Lagos
Evidence recorded
signed
Change, approvers and checks added to the Trust Page
One platform for the three people every serious system answers to.
Your developers want speed
Deploy from GitHub, preview every branch, attach a database, roll back in one step. Low-risk changes don’t wait for anyone.
Your leadership answers for the system
Risky changes come to your phone. You see what changes and who asked, then approve with a passkey. Every decision is on the record.
Your board and regulator need to check
A Trust Page shows where data lives, that backups restore and who approved each change. Share it through a link that expires.
Everything your developers expect, from the first push.
The governance never slows the everyday work. A change to a preview is one step, as it should be.
- Deploy from GitHub
- Push to a branch, get a running app. Builds happen on our servers, so a weak connection doesn’t stall a release.
- A preview for every branch
- Each pull request gets its own address, seeded with masked or synthetic data, never real personal records.
- Managed Postgres and Valkey
- High availability, point-in-time recovery to a second facility in the same country, and restore drills every week.
- Domains and certificates
- Custom domains with certificates issued and renewed for you.
- Logs, metrics and rollback
- Stream logs, watch health and return to any earlier release in one step.
- CLI and MCP server
- Work from the terminal, or let AI coding agents deploy through MCP under the same rules as your staff.
$ aspian deploy
Building guard-roster from main (3f9c2e1)
✓ Built in 41 s, image signed
✓ Checks passed, no secrets found
✓ Preview ready
https://pr-182--guard-roster.apps.example
$ aspian deploy --prod
! Production change. Approval requested from
T. Adeyemi and K. OkaforRisky changes wait for the right people.
When a change touches production, Aspian Cloud asks the approvers you named. A WhatsApp message starts the request. The approval itself happens with a passkey in the browser, tied to the exact change the approver reviewed. Try it below, then try to break it.
- Regulated work needs two approvers, and neither can be the person who asked.
- The approver sees what changes, what it affects and who asked before deciding.
- A link that has been used, or has expired, is refused. Opening a link preview never uses it up.
- If the plan changes after the link is sent, the approver must review the new version.
Aspian Cloud
Business account
Today
Approve production change to guard-roster
cloud.aspianalliance.com
Approval needed: production change to guard-roster requested by D. Eze.
cloud.aspianalliance.com/approve/…
10:41
Opening a link preview never uses it up. The link is spent only when an approval is signed.
Approve a production change from your phone
You’re T. Adeyemi, an approver at Kings Guards. Tap through the phone, then try to break the rules.
Step 1 of 4
The request arrives on WhatsApp
WhatsApp only starts the approval. The message carries a plain summary and a single-use link. Opening a link preview never uses it up.
Evidence your board and regulator can check.
The Trust Page is computed from the platform's own records: the audit trail, restore drills, storage inventory and telemetry. Nobody types a fact into it. Below is a signed snapshot: check the signature yourself, then change one figure and check again.
- Every fact shows when it was observed and what it covers.
- Evidence that is out of date is marked stale. Evidence that is missing is marked missing.
- Facts from partners are labelled as theirs, never mixed with what we measured.
- Snapshots are signed, so an auditor can verify them without asking us.
Kings Guards
Trust Page, all production apps. Signed 6 Nov 2026, 11:22 UTC
Residency
Current14 volumes, 9 backups, logs and build artefacts stored in Lagos
Observed 6 Nov, 11:16 UTC, 6 min before signing
Includes: guard-roster, client-portal, reports, backups, log store, build artefacts
Excludes: WhatsApp and email alert processors (disclosed separately)
Source records: inv_7c1e20, inv_7c1e21, bkp_cat_3302
Recovery
CurrentRestore drill: 48 s of data loss, restored in 9 min 12 s, checksums match
Observed 3 Nov, 02:40 UTC, 3 days before signing
Includes: roster-db, portal-db, reports-db
Excludes: Files uploaded in the last 15 minutes before the drill
Source records: drill_rst_0912, cert_rst_0912
Change control
Current37 production changes this month, each approved by 2 named people
Observed 6 Nov, 10:22 UTC, 1 h before signing
Includes: Production deploys, Settings changes, Database migrations
Excludes: Preview deploys
Source records: audit_seq_18240-18311, appr_batch_11
Reliability
CurrentAlerts reaching a person within 60 s: WhatsApp 98.9%, SMS 99.8%, email 100%
Observed 6 Nov, 11:00 UTC, 22 min before signing
Includes: All alert channels, last 30 days
Excludes: Voice, not enabled for this tenant
Source records: msg_rcpt_2026-10, msg_rcpt_2026-11
Exit
StaleLast export drill passed. It is past its 30-day window
Observed 26 Sep, 09:30 UTC, 41 days before signing
Includes: guard-roster export bundle
Excludes: External credentials, DNS, Third-party services
Source records: exp_drill_0926
Access review
MissingNo access review recorded in the last 90 days
No record in its window
Includes: Tenant memberships, Approver list
Source records: none found, so it is shown as missing
Attested by partner
Signed by the partner, not observed by the platform
Physical protection
Attested by partnerGuarding and monitoring of the cell facility
Physical protection partner (synthetic). Valid to 31 Mar 2027
Check the signature yourself
Your browser rebuilds the exact bytes that were signed and checks them against the published key. Nothing is sent anywhere.
Board pack, read-only
ActiveShows this frozen, signed snapshot to one audience until it expires.
10:00
Opens for anyone with the link until it runs out or you revoke it.
AI agents work under the same rules as your staff.
Every action has a risk class, and the class decides who must approve it. If an agent has read logs or customer content, anything it plans needs a person's approval before it reaches production. Agents can use a secret, but never see its value.
- 1
Read
Logs, metrics, settings, costs
Runs automatically
- 2
Reversible
Preview deploys, scaling within budget, rollback
Runs automatically and is logged
- 3
Production change
Production deploys, settings, database migrations
Behind a canary that rolls itself back, or with a person’s approval
- 4
Irreversible
Deleting data, turning off backups, moving data between countries
A person’s passkey. Two people for regulated organisations
Alerts that reach someone.
One messaging service for your apps and your operations team. If WhatsApp is down, the alert moves to SMS, then voice where a provider is enabled, then email, and you can see which channel delivered it.
For Nigerian organisations, messages carry an alert code and a secure link, not the details. Messaging providers process messages abroad, and we name every one of them.
Send a test alert
Kings Guards, alert KG-2291: patrol checkpoint missed
WhatsApp
Tried first
SMS
First fallback
Voice
Not enabled
Email
Last resort
Delivery log
- Choose which channels are down, then press Send alert.
What the guard receives on WhatsApp and email
Alert KG-2291. Open: cloud.aspianalliance.com/a/…
WhatsApp and email providers process messages outside Nigeria, so the message carries only the alert code and a secure link. The details open behind sign-in.
Timings are compressed. Delivery is at least once, so a guard may get the same alert on two channels, and it is acknowledged once.
Your data is stored where you agreed, and you can see it.
Each region is a self-contained cluster in one country. Apps, databases, logs and backups stay inside it. If our central control system is unreachable, your applications keep serving; only new deploys pause.
Lagos
For Nigerian data. Backups go to a second Lagos facility.
Abuja
For Nigerian data, close to federal government. Backups stay in Nigeria.
London
For UK data. Backups go to a second UK provider.
European Union
For workloads with no residency requirement.
Your data centre
The same platform installed on your hardware, run by Aspian.
We run it with your team, not instead of them.
Aspian Alliance builds and transforms systems for institutions. Aspian Cloud is how we keep running them afterwards, with your people trained to share the work.
1Train
We train your IT team to run your applications our way: runbooks, plans, approvals and incident handling.
2Operate
Your people run the routine tasks they are authorised for. New operators work supervised until they pass our assessment.
3Oversee
We monitor the applications and infrastructure we agree with you, lead serious incidents and send your owner a monthly report.
If you ever leave, you take your applications, your data, your runbooks and your team's training records with you, in a bundle we test regularly.
About the serviceBring us the system you can't afford to get wrong.
We are opening Aspian Cloud to organisations in stages. Create an account and we will set up your workspace, or talk to us about the systems you run today.