DRAFT · amber items are placeholders to decide before launchNot live
Pilot Taking a small number of pilot customers for winter 2026

AI that works for your business,
and nobody else.

Every customer gets their own sealed AI platform: one assistant your team talks to, agents built for your work, an identity check on every action, and an audit trail you can read. Nothing is shared with another business, and nothing goes to a public AI.

Isolated per businessPrivate AI modelsEvery action checkedYou approve what leaves
The architecture

Your instance is sealed by design, not by a setting.

Other businesses run in their own instances. Yours has its own assistant, agents, identity gate, data and auditor, and it reaches only two things outside itself: private models and the factory that builds for you.

OTHER CUSTOMERS sealedsealed sealedsealed sealedsealed sealedsealed no route between cells YOUR INSTANCE Client Operating Agent the one door · web, Telegram answers checked Operations agentown identity Records agentown identity Your custom agentbuilt by The Foundry IDENTITY GATE · one-use ticket on every call Your dataone writer per record · versioned Guardianread-only auditor Shared workspace · projects · files · history Private modelsrun by us, never public AIWestern-origin, open The Foundrybuilds · tests independentlyships only with your approvalnever touches your data
Why it's different

Most business AI is a shared chatbot holding your data.

We built the opposite: a platform where every agent has to prove who it is, every answer has to prove where it came from, and every customer is walled off from every other.

Read the security model →
Typical AI toolRecursive
Your prompts go to a public modelModels run privately for us. Nothing goes to a public AI.
Customers share one systemYour own instance, data, logins and network
A confident answer, right or wrongChecked against your records, or held back
One key that opens everythingEach agent has its own identity and a one-use ticket per call
Logs you can't seeOne writer per log, and an auditor that only reads
your-company · dashboard
Assistant
Workspace
Documents
History
People
Dana · owner
Which invoices are still unpaid, and is anything overdue?
Client Operating Agent
Three are unpaid. One is overdue: Fairview Events, $4,180, due 9 October.
● Grounded2 sources
invoices/2026-10 · Fairview Events · due 2026-10-09 · status open
workspace · "Chase Fairview payment" · assigned to Dana
Client Operating Agent
Want me to draft a reminder? I'll show it to you before anything is sent.
Needs your approval
WORKING FOR YOU
Operations agent
Records agent
Upload scanner
One door

Your team talks to one assistant. The work goes where it belongs.

Ask in plain words, on the web or in Telegram. The assistant hands work to the right agent, reads only what that agent is allowed to read, and shows you where each answer came from.

  • Each person has their own sign-in, memory and files
  • Files are virus-scanned before anyone can open them
  • Anything that leaves your business waits for your approval

Illustration · example business

Answers you can trust

Four honest answers. Never a fifth that's made up.

Every reply is checked against your records before you see it. When the check fails, the assistant tells you which of these happened instead of guessing.

● Grounded

Here's the answer, and its source

Every figure, date and claim is backed by a record you can open.

● Couldn't answer

The records don't say

It looked, and nothing in your data answers the question.

"Nothing in your files says when that lease ends."
● Couldn't look

A source wasn't reachable

A system was down or not permitted, so it tells you rather than pretending.

● Held back

A draft failed the check

It wrote something it couldn't back up, so you never see it.

"I had an answer, but part of it I couldn't confirm."
The Foundry

New agents, built for your business and proven before they reach you.

Tell us the job. The Foundry plans it, builds it, has it tested by an independent checker, and puts it in front of you. Nothing reaches your instance without your approval.

PLAN

You describe the job

We turn it into plain acceptance sentences you agree to.

BUILD

The Foundry writes it

In a sandbox that cannot reach your data or push to production.

TEST

An independent checker

Runs every sentence and reports what it could and couldn't prove.

APPROVE

You decide

You see the verdict and try it on a test copy first.

RELEASE

Staged, with a backup

Your data is backed up before every release and checked after.

How The Foundry works →
Security

Enterprise-grade controls, sized for a small business.

◫

Isolation

Separate runtime, data, network, identity gate and workspace for every customer.

⚿

Identity on every call

Agents carry their own credential and a short-lived, single-use ticket for each request.

≡

Audit you can read

Every log has exactly one writer, so every line has a provable author.

◉

Watched around the clock

Denied access, failed sign-ins and malware hits raise an alert within minutes.

↺

Rebuild from backup

A workspace can be restored from backup with its data byte-for-byte intact.

✓

Humans approve

Agents prepare and flag. People decide anything that leaves the business.

See every control →
See it running

Watch a real instance answer, check and refuse, in fifteen minutes.

We'll walk you through a working demo company: the assistant, its agents, the receipts behind every answer and the controls around them.