About

A small company building one thing carefully

Cirrus Tempo, LLC builds and operates Samba — a single-tenant integration platform purpose-built for regulated and government environments.

What we build

Samba synchronizes, transforms, and orchestrates data between disparate systems — enterprise applications, SaaS platforms, and legacy infrastructure — without the data-sovereignty compromises inherent in multi-tenant integration tools.

Each deployment runs entirely within the customer's own Kubernetes cluster and identity boundary. Credentials, payloads, audit logs, and AI-generated transformation logic never leave the customer's environment. That architecture lets customers extend the compliance posture they already hold — FedRAMP, StateRAMP, CMMC, HIPAA, or ISO — to their integration layer, rather than inheriting a vendor's shared infrastructure and its risk.

We serve mid-market organizations in regulated commercial verticals, state and local government and higher education, and defense industrial base contractors — customers for whom auditability, data control, and deterministic system behaviour matter more than connector breadth or raw throughput.

What we commit to

These hold for every customer regardless of vertical or contract size. They are documented in our architecture decision record, enforced in code, and validated in test — which is the only reason it is fair to call them commitments rather than intentions.

Your data stays in your cluster

Credentials, payloads, audit logs, and AI prompts are never transmitted to Cirrus Tempo or to any third-party service we control.

You own the authorization boundary

Samba deploys into your infrastructure, under your IAM, on your network. The authorization you already hold extends to cover it.

You can audit every change

Every configuration change, flow execution, and credential use is recorded with correlation IDs, user context, and old/new values — in a log the application cannot rewrite.

You can leave

Source-code escrow is available for enterprise contracts through a standard third-party arrangement, so you are not exposed to small-vendor continuity risk.

AI never makes silent decisions

All AI-generated configuration is validated against a formal grammar before reaching the runtime. Outputs are inspectable, source-controllable Python — not opaque model artifacts.

No silent fallbacks

When something is missing or mismatched, Samba fails explicitly and logs the failure. We do not substitute defaults, guess at values, or paper over mismatches.

How we're building the company

We are building deliberately rather than quickly: a focused platform, a defensible niche, and long-term relationships with customers who value operational integrity as much as functionality. This is not a hypergrowth strategy and it is not optimized to support one.

That has practical consequences you are entitled to know about before you buy. We do not run a direct enterprise sales team. We do not do high-volume outbound. We will disqualify an opportunity early and cheerfully if the boundary requirement that makes Samba worth its cost is not actually present — because a customer who bought us for the wrong reason does not renew, and we are building for renewals.

It also means we are a small vendor, which is a legitimate concern in a long procurement. Source-code escrow is available for enterprise contracts through a standard third-party arrangement, so continuity risk is something you can address contractually rather than take on faith.

The engineering record

We publish the architectural decisions behind Samba, including the ones that cost us something. It is the most honest picture of how we work that we know how to give you.