RESEARCH · EDUCATION

Read and annotate on your own machine.Keep the data in a place you can name.

Sigil opens, searches, annotates and redacts PDFs locally, and signs with your own certificate. Altovar Cloud holds the data in named regions. Auris signs your institution in, and Osprey publishes what you find.

Configure your solution See the pieces

Explore the architecture

PDFs on your own machine

Architecture illustration. Select a component to explore its role.

IN THE PRODUCT

Four things you can check.

SIGIL: Desktop
Windows and Linux. PDFs are opened, searched, annotated and redacted on your own machine.
OCR: Tesseract
OCR works when Tesseract is installed on the machine. Without it, Sigil does not offer OCR.
STORAGE: S3 API
Object storage speaks the S3 API, from 250 GB to 5 TB. Storage Box covers the rest.
PEOPLE: SAML · OIDC · SCIM
Auris connects to the institution's identity provider and provisions accounts from it.

THE SITUATION

How research IT usually breaks.

The tools are fine. The seams are the problem.

Documents travel by email: A paper goes round with comments in five different files. Nobody can say which copy is the one that was signed.
Data lives where a student left it: A dataset sits on a laptop or in a personal cloud folder. When the person leaves, so does the only copy.
Access follows the person, not the project: Accounts are made one by one and removed when someone remembers. A directory-driven login fixes both ends.

THE PIECES

Four pieces, each with its own page.

Documents, data, people and publishing.

01 PDF

Sigil

PDFs on your own machine

Open, search, merge, split and annotate. Redaction removes the pixels underneath. Password protection uses AES-256. Sign with your own certificate; the check reports whether the file is intact.

Open Sigil

02 HOSTING

Altovar Cloud

Storage and servers in named regions

S3-compatible object storage, Storage Box, VPS, dedicated servers and managed databases. The region is shown on each order.

Open Altovar Cloud

03 IDENTITY

Auris

One login for the institution

SSO through SAML or OIDC, SCIM provisioning, custom roles per project, and an exportable audit log.

Open Auris

04 CMS

Osprey

Publish what you find

A headless CMS with a schema written in code. Public content is readable without a key, over REST, read-only GraphQL or a typed SDK.

Open Osprey

FROM THE PRODUCT

Reading a contract in Sigil.

Highlight a passage and annotate it, on your own machine.

SigilInteractive preview

Service agreement.pdf1 / 3

ALTOVAR / 2026

Service agreement

01 — Scope

This sample document describes the services agreed for the research project.

02 — Access

Access to project documents is limited to the authorised team.

Interface reconstruction with sample data. Actions stay on this page.

Capabilities at a glance

Each component has a clear role.

Compare the pieces and what each one covers before defining your project.

Each component has a clear role.
Component	Role	What it covers
Sigil	PDFs on your own machine	Open, search, merge, split and annotate. Redaction removes the pixels underneath. Password protection uses AES-256. Sign with your own certificate; the check reports whether the file is intact.
Altovar Cloud	Storage and servers in named regions	S3-compatible object storage, Storage Box, VPS, dedicated servers and managed databases. The region is shown on each order.
Auris	One login for the institution	SSO through SAML or OIDC, SCIM provisioning, custom roles per project, and an exportable audit log.
Osprey	Publish what you find	A headless CMS with a schema written in code. Public content is readable without a key, over REST, read-only GraphQL or a typed SDK.

Your project

Define your starting point.

Choose the components you want to discuss. The summary follows your selection.

HOW IT STARTS

A way to start.

01
Put the PDFs in Sigil

Install it on the machines that read and annotate. Nothing has to be uploaded.
02
Choose where the data lives

Pick object storage or a server in a region you can name.
03
Connect the institution's login

Add your identity provider to Auris and provision accounts with SCIM.
04
Publish

Model the content in Osprey and serve it to your site.

QUESTIONS

Questions we get.

Do you offer GPUs or managed notebooks?

No. We do not offer GPU servers or a managed notebook environment.

Does Sigil run on a Mac?

No. Sigil is built for Windows and Linux.

Is a Sigil signature a qualified signature?

No. It is a PDF signature made with your own certificate. There is no trust store, revocation check or timestamp, so it is not an eIDAS qualified signature.

Can we keep data out of third-party services?

Sigil works on your machine. The cloud products run in the regions shown at order, and some network services in front of them run on a global network. Ask us for the data map of the pieces you want.

Can it handle thousands of accounts?

Auris provisions through SCIM from your identity provider, so accounts follow your directory. We have not published a load figure for it.

WHAT THIS PAGE DOES NOT PROMISE

Read this before you plan around it.

These are the limits, stated before you ask.

No GPUs or notebooks

We do not offer GPU servers or a managed notebook platform.

No threat-intelligence tooling

No STIX or TAXII, no MISP, no sandboxes. This page covers documents, data, identity and publishing.

No macOS

Sigil is built for Windows and Linux.

No qualified signatures

Sigil signs with your own certificate. It is not an eIDAS qualified signature.

Tell us what the lab keeps, and where.

We will go through the pieces with you and mark the ones you do not need.

Talk to us All solutions