Frequently Asked Questions
Answers for both SBOM Analyzer and AI Governance Review.
SBOM Analyzer
What file formats are supported?
SPDX and CycloneDX SBOMs. Upload at sbom.technosoluce.com or try the demo.
Is my SBOM uploaded to your servers?
Core analysis runs in your browser. See our Trust page for how we handle supply-chain data.
What does the analyzer produce?
Component inventory, CVE matches, severity prioritisation, and compliance-oriented views for supply-chain audits.
What is Architecture & Infrastructure Profiling?
An SBOM-by-estate view: production, core apps, DMZ, cloud, DR, and OT/ICS. You filter the catalog by segment and produce the six stakeholder reports per zone or rolled up. It is not a CMDB or network map. See features and functionalities or services.
Getting Started
What does the AI Governance Review actually produce?
A structured accountability workflow for AI deployments. You go through 5 phases: define the system, answer 32 governance questions across 6 domains, review the auto-generated gap register, assign owners and remediation approaches, then download 5 audience-specific reports — Executive/Board, Technical/Review, Legal/DPO, Security/CISO, and Vendor/Procurement. Runs in your browser on the free tier. No sign-up required.
Can I try the tool before requesting a paid plan?
Yes — the Free tier covers both products with no account required. Use SBOM Analyzer for supply-chain analysis or AI Governance Review for the five-phase assessment and stakeholder reports. For guided onboarding or enterprise deployment, request a demo.
How quickly can we get started?
After you request a demo or start a trial, most customers are operational within 1-2 weeks with reporting and analysis in place. Air-gapped and government deployments may take 4-6 weeks for setup, configuration, and professional services.
Trials & Contact
How do I start a trial or request a demo?
For a tailored demo and reporting setup, request a demo. To explore on your own, you can start a 14-day free trial at app.ermits.com with no credit card required — full access to analysis and multi-stakeholder reporting.
Do you offer professional services?
Yes. Beyond the platform, our Professional Services team supports implementation, custom reporting and framework development, training, and ongoing advisory — so you get analysis, reporting, and the support to use it effectively. Available for Enterprise and Government tiers. See the service catalog.
Pricing & Billing
What payment terms do you accept?
We accept annual payments via invoice, credit card, or purchase order. Multi-year agreements receive additional discounts.
Can I upgrade or downgrade my tier?
Yes, you can change tiers at any time. Upgrades are prorated immediately, while downgrades take effect at your next renewal.
What's included in Professional Services?
Engagements are scoped per project and can cover onboarding, custom report or framework development, staff training, and strategic advisory. Contact us to discuss scope and timing.
Deployment
Do you support air-gapped environments?
Yes. Our Government tier includes full support for air-gapped deployments: on-premise hosting, offline vulnerability data, and professional services for setup and reporting workflows.
Not sure where to start?
Start a review right now — no account needed. Or compare plans and get in touch when you're ready for a guided setup.