Documentation

Cerynix Documentation

Everything for deploying, administering and using Cerynix — organized once, in one place, and searchable. Start with the golden path, or jump straight to a reference.

Docs match v1.0.3 — the current release candidate. See known issues if something here doesn't match what you see.

Getting started

From a clean server to a working, licensed, onboarded instance.

Install guide

The illustrated, step-by-step walkthrough to self-host Cerynix with Docker Compose — prerequisites, TLS, health checks, first-admin bootstrap.

Read the guide

First run & onboarding

A quick-reference checklist: create your organization, run the onboarding wizard, invite your team, configure the platform.

See the checklist

License activation

Start in the unlimited Evaluation edition, then activate your signed key in the web UI — no restart, no shell access needed.

Activate a license

Using Cerynix

The golden path, end to end, and the day-to-day modules around it.

The golden path

Scope → controls → evidence → assurance → findings & CAPA → management review → signed Audit Room export.

Read the user guide

Day-to-day GRC loop

A screenshot-illustrated walkthrough of control → evidence → approval, risk → task, incidents and reports.

See it in the install guide

Administration

Users, roles, single sign-on, backups, TLS and updates.

Users & roles

The five system roles and the full permission matrix — who can read, write, approve and manage what.

See the permission matrix

Security & SSO

TOTP MFA for everyone; SAML, OIDC, LDAP and SCIM 2.0 provisioning for Enterprise.

Configure SSO

Backups, TLS & updates

Encrypted backups and restore drills, TLS certificates, and safe updates in place.

See the backup runbook

Reference

Config, environment variables, scripts, the API — and the security posture underneath.

Connectors

What to grant on each source, which product variants are supported, and what a failure message means.

Browse the connector guide

Configuration & env reference

Every environment variable, installer CLI flag and operational script — plus where to find the interactive Swagger/ReDoc API reference.

Browse the reference

Trust & security

Tenant isolation, encryption, MFA/SSO, auditability, supply-chain signing and sub-processors — stated honestly.

Read our posture

Operations

Production runbooks — schema-aware upgrades and tested disaster recovery.

Safe upgrades

The updater automates download, verification, rebuild and self-test — with an automatic pre-upgrade encrypted database backup.

Read the runbook

Backup & disaster recovery

Client-side encrypted backups, off-box copies, and a restore-drill script that measures real RTO/RPO.