Private AI
The four boundaries — network, storage, identity, telemetry — with no path from the system to an external model provider.
On the Private AI page
View architectureReference architectures
The designs behind our implementations, published openly — with the decisions, the trade-offs, and the failure modes each one addresses.
Most consultancies describe their capability. We would rather show the architecture and let you judge it. If you study one of these and find it correct, you have learned more about how we work than any case study would tell you.
These are patterns, not products. Every real deployment differs in data, infrastructure, and regulatory position — which is what the assessment establishes before anything is built.
Library
Published architectures
Enterprise RAG Pipeline
Indexing and query paths separated, with the entitlement checkpoint in front of retrieval rather than after it.
View architectureAI Trust Boundary
Where untrusted input enters, where entitlements are enforced, and where tool calls must be gated.
On the AI Security page
View architectureEnterprise AI Platform
Six layers ordered by cost of change, with governance spanning all of them and the gateway as the control point.
View architectureAir-Gapped Deployment
How models and dependencies cross an air gap, and how updates are validated inside the enclave.
View architectureDeployment Decision Tree
Which deployment model your constraints permit, evaluated regulatory-first.
On the Deployment Models page
View architecture
How to read these
What each page contains
The diagram
Drawn to a consistent visual language: dashed boundaries are trust or network perimeters, accent colour marks the component the diagram is about, and every data flow is directional and labelled.
Component walkthrough
What each element does and why it sits where it does — including the ones that are commonly omitted and shouldn't be.
Decisions and trade-offs
What we chose, what it costs, and what we chose against. An architecture without stated trade-offs is marketing.
Failure modes
The specific things that go wrong when the design is not followed. This is usually the most useful section.
Want one sized for your environment?
The assessment produces a reference architecture scoped to your data, infrastructure, and regulatory position — and the roadmap is yours whether or not you engage us to build it.
We will sign your NDA before a detailed technical discussion.