Móholt / Reykjavík, Iceland
Built where sovereigntyis personal.
EMBI is built by Móholt ehf., an Icelandic-owned company with deep experience in the records, cases and information governance of government.
Capability, in practice
Institutions need control they can retain.
01 /
Open by design
An AGPL core, open interfaces and data portability give public institutions a foundation they can inspect and extend. The commercial modules add controls, not a cage.
02 /
Grounded in government
The founder brings 25 years in records, case management and information governance for government — the file plans, the retention schedules, the access requests. Engineered in Iceland, for institutions that need a sovereign origin for their code as well as their data.
03 /
Clear responsibility
We work with dual-use parties and follow applicable export-control and clearance rules. Product readiness is stated plainly, and so is what we do not claim.
Built on one foundation
Open records. Sovereign administration.
EMBI is an open-core (AGPL) electronic Records and Case Management System for public institutions. Its working foundation covers cases, registration, declared records and lifecycle workflows. Iceland is the first national context; file plans, retention rules and archival requirements must be configured and assessed for each receiving institution. TRL 6 is self-assessed trial readiness, not complete legal compliance.
Platform architecture / 01
Records law and archives
Accountable records. Governed handover.
Institutions need records they can account for, preserve and transfer. Software controls support those duties alongside institutional policy, authorised decisions and the receiving archive’s requirements.
Lifecycle
Records workflows informed by ISO 15489: register, classify, declare, retain, and authorise disposal or transfer with supporting evidence.
Retention
Institution-approved schedules, preservation holds and disposal authority govern the lifecycle. A retention deadline is not automatic permission to destroy a record.
Archives
Archive preparation and export workflows carry metadata and integrity evidence. Each recipient’s package specification, transfer timing and acceptance procedure must be agreed.
Access requests
Disclosure and data-subject requests require a recorded legal assessment. A defence marking does not create an automatic blanket override of every other obligation.
Illustrative product snippet · fictional registry figures. Capability of the civil platform, stated at TRL 6; not a certification.
Company
A narrow product. A wide requirement.
Ownership & origin
Icelandic-owned, founder-led, engineered in Iceland. Release manifests and a bill of materials (SBOM) help buyers examine the code and its dependencies as part of their own supply-chain assessment.
Model
Open core. The EMBI platform is AGPL; EMBISEC is a commercial module; EMBISEC-L is a configuration and service offering; evaluation and integration are services.
Why now
Data sovereignty, resilience under disrupted communications and alliance-style labelling are becoming procurement requirements for civil as well as security buyers.
Next
Approved package import; selected ADatP-3 message profiles; source-and-recipient policy binding; consistent access enforcement; archival recipient profiles. Deliver against evidence and agreed acceptance criteria.
Investor brief on request. No revenue, adoption or performance claims are made on this site.
Let’s start with your requirements.
Discuss your records, security and operational environment.
Request a briefing