Enterprise AI for government and defense, fully inside your perimeter

Run models, agents, and the AI Workspace air-gapped or in your accredited environment, with every action recorded.

SOC 2 Type II certified

GDPR compliant

Air-gapped and classified networks

No internet connection required. Everything runs in your Kubernetes, including OpenShift.

Your own models

Run open-weight models on your own hardware, tuned for agent work.

Your identity, your secrets

Sign-in through your own identity provider, such as a self-hosted Keycloak, and secrets from your own vault.

Every action on record

A complete trail of every model call, tool call, and agent action, kept in your environment.

Separate environments and accounts

Run each environment and each organization separately, from one control plane.

AI for thousands of users

One governed AI app and approved agents for the whole organization.

Your infrastructure enforces it, not our promise

For mission and citizen data, a vendor’s sandbox is an attestation you cannot inspect. A network policy in your own cluster is a control you enforce, and it holds whether or not we got every internal control right.

A vendor-drawn boundary

A boundary you draw

Isolation

Isolation

Isolation you cannot inspect or change

Your firewall, your CNI, your egress policy

Egress

Egress

Egress on a path the vendor controls

Deny-by-default means there is no route out

Assurance

Assurance

An assurance you are asked to take on trust

A control your team enforces and can verify

DEPLOY IN

Air-gapped

On-prem

Your VPC

Managed cloud

GOVERNED BY

Your firewall

Your CNI

Your egress policy

Your identity provider

OBSERVED WITH

Your OpenTelemetry

Your SIEM

Your dashboards

Built for the most security-conscious teams

Certified and audited

SOC 2 Type II certified and GDPR compliant, with independently audited controls so your security review starts from a known baseline.

Runs where your data lives

Your VPC, your data center, or fully air-gapped. Nothing leaves your environment unless you say so.

Every action is logged

Agents act as the person who asked, credentials come from your vault at call time, and every run is logged and attributable.

See how it would run in your environment

Build, run, and govern every AI agent in your agency inside an environment you own.