Three tiers. Full self-service. No sales calls. Leave your legacy vendor with your graph intact, your poison stripped, and a cryptographic birth certificate for your data.
Your data, out of their hands. Flat migration. No relationships preserved. No poison scan. Pure exit. If you know what you're doing, this is enough.
Your business, intact. Ten years of relationships preserved as a graph. Full Sovereign Birth Certificate. 100% credited toward your first Sovereign Suite year if you stay.
The vendor's DNA, burned out. Every tracking pixel stripped. Every shadow field quarantined. Every relationship preserved. Board-ready attestation. For organizations that do not tolerate ambiguity about who owns their data.
| Capability | Escape | Shift | Severance |
|---|---|---|---|
| Flat contact / account / deal export | ✓ | ✓ | ✓ |
| OAuth or bundle upload intake | ✓ | ✓ | ✓ |
| Full relational graph preservation | — | ✓ | ✓ |
| Custom object + association mapping | — | ✓ | ✓ |
| Historical integrity (owner chain, field history) | — | ✓ | ✓ |
| Cleanroom sanitization (tracking pixel + poison strip) | — | — | ✓ |
| Shadow metadata quarantine (__hs_*, _sfdc_*, mc_*) | — | — | ✓ |
| Relationship inference (Tier III swarm logic) | — | — | ✓ |
| Sovereign Birth Certificate — JSON | Lite | Full | Full |
| Sovereign Birth Certificate — signed PDF | — | — | ✓ |
| ML-DSA-65 signature · Clearing House anchor | ✓ | ✓ | ✓ |
| Board-ready attestation letter | — | — | ✓ |
| Tax ID + auditor delivery fields | — | — | ✓ |
| Credited 100% toward Sovereign Suite (30-day window) | — | ✓ | — |
| Sales calls / discovery calls | Never | Never | Never |
Your legacy vendor injected themselves into your data. Tracking pixels in email bodies. Shadow metadata fields with vendor prefixes. Behavioral code in rich-text. Author fingerprints in attachments. You can see it if you look. The Cleanroom removes it, atomically, before a single byte reaches the Citadel.
In a typical HubSpot org the Cleanroom detects 8,400+ poison events. In a mature Salesforce org the count exceeds 40,000.
{
"version": "2.0",
"certificateId": "sbc_550e8400-...",
"issuedAt": "2026-04-23T14:32:10Z",
"issuer": {
"name": "DrkLynX",
"ultimateParent": "JCAM"
},
"source": { "vendor": "HubSpot" },
"sanitization": {
"poisonsFound": {
"tracking_pixel": 12,
"shadow_metadata": 5,
"embedded_script": 2,
"hidden_cookie": 8
},
"poisonsRemoved": 27
},
"relationalIntegrity": {
"nodeCount": 2847,
"edgeCount": 9154,
"historicalCompleteness": 0.991
},
"signature": {
"algorithm": "ML-DSA-65",
"publicKeyFingerprint": "a4f9c3f8c7d8e9f0"
}
}
SOC II certifies that humans audited humans for six months. Sovereign Hardening certifies, in real time, that mathematics audits everything. Three pillars. Continuous. Verifiable by any third party — including your own auditor — without our cooperation.
A real-time, air-gapped, PQC-encrypted replica of your data living in an isolated GCP project. Append-only. Immutable. Every batch signed with ML-DSA-65 and witnessed by the Clearing House. If our primary region is nuked, your data survives in mathematics.
One button. Your entire operational stack — Ora, the Citadel, your data, your Sovereign Birth Certificate, the Terraform to run it — exported into your own GCP or Cloudflare account. If JCAM vanishes tomorrow, your business runs itself. Auto-triggers if our primary DNS fails for 30 consecutive days.
Every access signed at source. Every week, a Sovereignty Report is generated, Merkle-chained to the previous week, signed with ML-DSA-65, and anchored to the Clearing House. Your own auditor verifies it offline with nothing but the public key. 52 cryptographic audits per year — not one human attestation.