Cloud or Sovereign. Execution always stays in your network.
The application under test lives inside your network, so the runner that drives it does too, in both editions. The editions differ in where the control plane runs and what is allowed to leave.
- Runner: always yoursDrives SAP and web apps; holds the credentials
- Control plane: CloudPortal, review and generation hosted by MindMap
- Control plane: SovereignThe same, single-tenant, inside your network
Same engine, two places to run the control plane.
| Dimension | Cloud | Sovereign |
|---|---|---|
| Status today | Built Hosted portal and runner kit, multi-tenant (each customer sees and runs only its own work), single sign-on and roles. | Built, not run live Server image with sign-in through your identity provider, roles, an audit log, an offline-signed licence and signed updates. Rehearsed by MindMap; the first customer install is next. |
| Who it is for | Partners and customers who accept SaaS for test assets | Regulated, public-sector or “no outbound” environments |
| Control plane | Portal, review, generation and run queue hosted by MindMap | The same, single-tenant, on your VM (docker compose) or Kubernetes |
| Runner | Windows runner in your network; outbound HTTPS 443 only | The same runner, pointed at the in-network portal; or a standalone kit with no portal |
| Credentials | Never leave the runner | Never leave the runner |
| Data at rest | Encrypted at rest; each run tagged to its customer, and shown only to that customer | Your server's own volume |
| AI | Off by default; a customer may opt in to MindMap Sovereign AI hosted by us | Off; or MindMap Sovereign AI inside your perimeter |
| Updates | Deployed by us in agreed windows, with your approval | Signed offline bundle (engine and XF tables) that you apply |
| Licence | Subscription | Offline-signed, node-locked, term-bound licence file |
| Telemetry | Run metrics to MindMap | None leaves; local metrics |
| Support access | MindMap operations | Screen-share only; you run the diagnostic bundle |
What crosses the boundary, edition by edition.
Cloud moves the control plane, never your systems. Sovereign moves nothing.
Cloud
MindMap-hosted
- Portal · review · generation · run queue
- Licence · updates · AI (only if you opt in)
Your network
- Windows runner: worker plus Edge or SAP GUI
- Credentials stay here, protected with DPAPI
- The SAP and web applications under test
Sovereign Built, not run live
Your network: control plane
- Portal · review · generation · run queue
- Licence file · signed update bundle
- Model endpoint, optional and yours
Your network: runner
- Windows runner: worker plus Edge or SAP GUI
- Credentials stay here, protected with DPAPI
- The SAP and web applications under test
One setting. Off unless you change it.
AutoTestr is rules-first: steps are matched by rules that execute your configuration. A model is a fallback for steps the rules cannot settle, and the runner kit carries no model client at all.
| Mode | Where the model runs | Edition | Status |
|---|---|---|---|
| Off (default) | Nowhere. Steps the rules cannot settle are flagged for a reviewer. | Both | Built |
| MindMap Sovereign AI, hosted | An open-weight model on MindMap's own GPU host. It gives a second reading of each step and explains failed runs; its answers are advisory and never written into the capture. | Cloud | Built |
| MindMap Sovereign AI, in your perimeter | The same model on a host inside your network next to AutoTestr Sovereign. Nothing leaves. | Sovereign | Built, not run live |
Every step a model chose is marked as such in the review screen and flagged with a comment in the capture, so a reviewer always knows which answers a model gave. Read more about MindMap OS and how we approach sovereign AI.
No outbound connection allowed? Start there.
Tell us what your network allows and we will tell you, plainly, which edition fits today and what is still on the roadmap.
Worksoft and Certify are trademarks of their owner. MindMap AutoTestr is a MindMap Digital product; naming Certify describes the files AutoTestr produces and does not imply endorsement by Worksoft. Capability status words on these pages (Built, Built not run live, Roadmap) describe the current release.