DevMatrix runs as a hosted service by default. When a security boundary, a regulator or an auditor requires something else, the deployment model and the evidence follow — without a second product and without a second compiler.
The hosted console at devmatrix.dev is where DevMatrix runs unless something says otherwise. Self-hosted, air-gapped and hybrid exist for organizations whose security boundary requires the compiler to run inside it.
A regulated platform is not a different product here. It is the same compilation, with the obligations written down where they can be checked.
The registry of accepted compliance profiles, and every attribute a profile can declare, is documented in the DMX language reference
In most organizations that opens weeks of archaeology. Here the answer is a file: every emitted line traces to its specification node, and any third party can rebuild the artifact from the specification plus the compiler version.
DevMatrix holds no certification or attestation under these frameworks and does not claim one. What it produces is the structural evidence an assessment consumes — the inventory, the traceability, the reproducibility proof and the control coverage listed above. The assessment itself is your auditor's.
No discovery call before the engineering. Pick the door that matches what you still need to know.