Straight answers to the questions buyers ask first.
What Demia does, how the platform works, how your data stays secure, and which reports it covers. If your question isn't here, ask us directly.
The basics
What does Demia do?
Demia makes data provable. We capture operational data where it's created and attach trust and provenance metadata to every record. We control who can see it, and turn it into reports, product passports and decisions that hold up with buyers, regulators, auditors and financiers.
Who is Demia for?
Producers, processors and traders in critical minerals, materials, energy and agriculture. The government agencies that regulate and buy from them. And the insurers, lenders, auditors and legal teams who rely on their data.
What problem does Demia solve?
Most compliance, ESG and supply chain data is collected by hand and rebuilt after the fact from documents nobody can independently check. Teams we speak with spend hundreds to thousands of staff hours gathering it, and it still struggles under scrutiny. Demia captures it once, at the source, in a form anyone with permission can verify.
What does "the sovereign integrity layer" mean?
Your data stays yours: in your environment, under your policy. Demia adds the integrity on top, meaning proof of where each record came from, that it hasn't been changed, and who has touched it.
How is Demia different from traceability or ESG software?
Most tools record what participants report about themselves. Demia starts from signed source data and computes the claim from it. One evidence record then serves compliance, investor and buyer reporting, product passports and day-to-day operations, so you don't run a separate tool and data project for each.
How the platform works
What is The Forge?
The Forge signs data the moment it's created, at the sensor, device or system. Each record carries its device identity, timestamp, location and calibration status, and is published to an encrypted data stream controlled by the data owner, where any later change is logged. It works fully offline and can bind signing keys to hardware security modules.
What is the Zero-Trust Data Fabric?
The Fabric is the control plane for your data. Access policy travels with every record, so each person, organization and AI agent sees only what it's entitled to, evaluated in real time. Every access is logged, and partners can be granted scoped access without you handing over custody.
What is Mavric?
Mavric is the provenance engine inside the platform. It normalizes and attests incoming records, then assembles them into the outputs you need: reports, alerts, traceability records and product passports, with every line traceable to its source.
What does our team actually use day to day?
The Demia platform. It includes a site dashboard with a digital twin, analytics, early warnings, product traceability, reporting and digital product passports. Every view draws on the same signed record.
What do you mean by product traceability?
We follow the product itself, whether that's a concentrate lot, a steel heat, a crop shipment or a batch of gas, from where it's produced to the buyer. Each custody step is signed. The finished trace is embedded in the product's passport and carried into the reports that depend on it.
What is a confidence rating?
The Forge checks each record against trust criteria agreed with your stakeholders and flags any gaps. Those signals roll up into a confidence rating for a site, a group of sites, a region or a whole company, so you can see where your evidence is strong and where it needs work.
Data, security and AI
Who owns our data?
You do. Records stay in your governed environment, and exports come in open, standard formats. Nothing is locked into a Demia-only format.
Where does Demia run?
In your environment: cloud, on-premises, air-gapped or at the edge. It isn't a shared multi-tenant service, and your data doesn't leave your governed environment to be processed.
Does Demia train AI models on our data?
No. Demia processes and attests your records. It doesn't train models on customer data, and your data is never used to improve models for anyone else.
How do you control what AI agents can do with our data?
AI agents go through the same Fabric policy as people. Each agent gets scoped access to specific records for a specific purpose, every action it takes is logged, and access can be revoked at any time. That gives your security team one control plane as agents start working with your data at scale.
What happens when a site loses connectivity?
Capture and signing continue on site. Records queue in their original order and sync with their original signatures and timestamps when the link returns. The custody chain has no gap, and nothing can be slipped in while the site was offline.
Can records be tampered with?
Records are never overwritten. Each one is signed and published to its own encrypted data stream, and any change is logged as a new entry with who made it and when. Tampering shows up rather than just being prohibited. Where keys are bound to hardware, a cloned device can't produce a valid signature.
Can we prove compliance without exposing confidential data?
Yes. Selective disclosure lets you share proof that you meet a requirement with a specific counterparty, for a specific purpose and time window, without revealing suppliers, process parameters or pricing.
Can Demia run in government and classified environments?
Demia is architected for unclassified and higher-assurance deployments, including air-gapped environments, and built to FedRAMP and CMMC control baselines. Accreditation is scoped per program with your security team.
Compliance and reporting
Which regulations and frameworks does Demia support?
Among others: DFARS 252.225-7052 and 10 U.S.C. 4863 and 4872, NDAA foreign-entity-of-concern rules, 45X material assistance, UFLPA, Dodd-Frank 1502, the EU Battery Passport, the EU Digital Product Passport, CBAM, EUDR, OGMP 2.0, ISO 14064, USDA and EPA reporting, organic certification, and voluntary carbon methodologies such as Verra and Gold Standard.
Can one deployment cover several regulations?
Yes, and that's the point. Most regimes ask the same questions of the same underlying record: where something came from, who owns and controls it, what it emitted and what it cost. Demia builds that record once and structures it for each regulator, buyer and program.
Can Demia report to investors, lenders and buyers as well as regulators?
Yes. The same signed data produces compliance filings, voluntary and audit reports, investor disclosures, lender covenant and milestone reports, and buyer qualification packages and product passports.
Will regulators, verifiers and courts accept Demia's output as evidence?
Every record carries a cryptographic attestation and a lineage trail built to evidentiary standards, and our export packages include methodology documentation. Acceptance is ultimately the receiving party's decision, so we design outputs around each one's specific requirements.
Does Demia replace our auditor or verification body?
No. Demia doesn't certify your claims. It gives your auditor or verification body scoped, read-only access to the signed source record, which makes their review faster and their conclusions easier to defend.
Does Demia own or trade carbon credits?
No. Demia doesn't own, trade or broker the credits or certificates it helps produce. Our value is the integrity of the data, and that independence is what makes the outputs defensible.
Which deadlines matter most right now?
On 01 Jan 2027, 10 U.S.C. 4872 and DFARS 252.225-7052 extend to covered material that was mined, refined or separated in a covered nation. The EU Battery Passport follows on 18 Feb 2027, and NDAA Section 842 battery restrictions begin applying to new acquisitions in 2028. If you sell into defense or EU battery supply chains, the time to build the evidence is now.
Deployment and integration
Do we have to replace our existing systems?
No. Demia connects to ERP, historian, plant and logistics systems such as SAP and PI Vision through connectors that sign data as it comes in. An open API sends attested data to BI tools like Tableau and Power BI with its lineage intact.
What hardware is involved?
Where you already have instruments, we connect to them. For remote or under-instrumented sites, Demia deploys edge hardware: The Forge and a Fabric Publishing Node, which can run as a self-contained unit with its own compute, power and network. Drone and satellite observation can be added alongside.
How does an engagement start?
With a scoping conversation about what you need to prove and to whom. Then a pilot on a real, bounded slice of your operation, so you see signed data flowing before committing to anything broader.
What are Silver, Gold and Platinum?
Three ways in, matched to where you sit in your value chain. Silver integrates you around a partner already running on Demia. Gold stands up the first verified data layer in a value chain that doesn't have one, and is where most first movers start. Platinum covers full operational digitization, including onsite storage, disconnected operation and elevated service levels.
How long does deployment take?
It depends on your sites, systems and connectivity, so we scope it in the first conversation rather than quote a generic number. Pilots are deliberately bounded so you see working results quickly.
Can our suppliers and customers connect too?
Yes. Partners upstream and downstream can join the same evidence chain with scoped access, so the record extends across the value chain without anyone handing over their full operation.
Working with Demia
Is Demia a software platform or a services firm?
Both. The platform is the core. Alongside it, our teams provide compliance readiness assessments, cybersecurity, environmental services, digital forensics and applied R&D for organizations that need hands-on help.
What's Demia's track record?
Demia's team has spent the better part of ten years building and hardening this verification technology across mobility, defense and environmental programs. Our Chile digital MRV pilots (2018 to 2022) were recognized by the World Bank and UNEP.
How do we get started?
Book a 20-minute demo to see a real evidence chain, or talk the problem through with us first. There's no obligation, and if Demia isn't the right fit we'll tell you.
See the proof,
not a pitch.
A 20-minute session. We show a real evidence chain, not a slide deck.
Book a 20-min demoTalk through the problem first →Not sure what you need? We help you think it through, no obligation.