Nomion
Digital inspection platform for security companies, hospitals, and facility management. Encrypted checklists, team coordination, and compliance reporting — offline-first, privacy-first. Available as PWA and native iOS app.
The Nomion Platform
From daily inspections to court-ready documentation. Each product serves a specific industry need.
✅ Nomi Light
v3.1.1 · Production
Progressive Web App for structured quality inspections, employee qualification tracking, and break management in security services. All data encrypted end-to-end in your own Microsoft OneDrive. Also available as native iOS app.
- 8-category inspection checklists, configurable per location
- Multi-site (Standorte) — isolated data per location with separate teams
- Progressive qualification levels with configurable questions and PDF certificates
- Break management — break-reliever role with protocol, alarms, and shift import
- Shift plan import — automatic PDF/Excel recognition
- On-duty list — who is working, shift times, break status
- Statistics and KPI — daily rate, monthly comparison, category breakdown
- Excel export — 3 files (inspections, breaks, qualification) with color coding
- Automated email reports (daily, weekly, monthly)
- 5 roles: Master, Administrator, Moderator, Break-Reliever, Viewer
- Employee profiles with history, stats, level badges
- Cross-site visibility — all inspections viewable across locations
- AES-256-GCM encryption — data encrypted before leaving the device
- PWA + iOS App — installable on any device, works offline
📋 Nomi Report
Production
Structured incident reports for hospitals, clinics, and security services. Documentation with photo protocols, server-side PDF generation, and multi-tenant architecture with full audit trail.
- Structured text reports with customizable templates
- Photo documentation and protocols
- Server-side PDF generation and email delivery
- Multi-tenant — each client fully isolated
- Push notifications for new incidents
- Daily/weekly email digests
- REST API for third-party integrations
- Full audit trail in PostgreSQL
🔒 Nomi Pro
Planned
Court-admissible documentation platform for law enforcement and legal proceedings. Append-only records with PKI signatures, hash-chain integrity verification, and certified export formats.
- Append-only records — entries cannot be modified or deleted
- PKI digital signatures on every record
- Hash-chain integrity (blockchain-like verification)
- Court-ready PDF export with digital signature and metadata
- Two-factor authentication (TOTP / FIDO2)
- End-to-end encryption with client-held keys
- Automated encrypted backups
- BSI / ISO 27001 certification path
How It Works
Zero-knowledge architecture. Your data never touches our servers unencrypted.
1. Authenticate
Sign in with your Microsoft account via OAuth2 PKCE. No passwords stored, no registration forms. Your organization’s Azure AD controls access.
2. Encrypt Locally
All data is encrypted with AES-256-GCM in your browser before leaving the device. Keys are derived using PBKDF2 with 100,000 iterations from your team’s shared secret.
3. Sync to OneDrive
Encrypted data syncs to your organization’s OneDrive via Microsoft Graph API. Your data lives in your own Microsoft 365 tenant — we never see it.
Security Architecture
- AES-256-GCM — Military-grade encryption for all stored data
- PBKDF2 100k iterations — Key derivation resistant to brute force
- Team Key — Each location has its own 256-bit key, isolated per team
- OAuth2 PKCE — No passwords stored, no token exposure
- No backend — No database, no server — only your OneDrive
- 8-hour sessions — Automatic logout, local data wiped
- IndexedDB wipe — No traces after logout
- CSP headers — Script injection protection
- Optimistic locking — ETag-based, prevents data loss on concurrent edits
- Audit log — 500 entries tracking all actions
Deployment Options
SaaS (Hosted)
We host the application. You sign in, start working. Updates are automatic, zero maintenance. Data stays in your OneDrive — we only serve the application code.
From €5/user/month
Self-Hosted
Install on your own infrastructure. Full control over the environment. Your Azure AD, your domain, your rules. Automatic updates available.
From €500 one-time
Technology
- Frontend: Vanilla JavaScript, no frameworks
- Storage: IndexedDB (offline), OneDrive (sync)
- Auth: Microsoft Entra ID (Azure AD)
- Encryption: Web Crypto API (AES-256-GCM)
- PWA: Service Worker, offline-first
- iOS: Native app via App Store
- Design: 615-kit CSS system
- Reports: Microsoft Graph API (Mail.Send)
- License: S3-based validation
Nomion is a product of Style 615. Built in Germany, hosted in Europe, GDPR-compliant by design.