Why no central server
A defence that depends on its vendor's servers inherits their outages, their jurisdiction, their staff and their compromise. A vendor that can switch a system off can be made to. JC!IJB! removes the path instead of promising not to use it.
What sovereignty does not mean
No central vendor server does not mean impossible to compromise. A sovereign system is defended by its own hardening, isolation, integrity checks, external assessment and the customer's operations — described plainly on the security page.
Evidence stays per host
Each protected server or site keeps its own history. Correlation happens inside the customer's domain, on the customer's side, by reading those histories over channels the customer initiates and pins.
Updates without a call home
Releases are signed bundles with published checksums. An ordinary browser may download them from this website; the appliance itself never contacts it and verifies the signature before anything is installed. How verification works.