Deploy inside your perimeter. Or ours. Or neither.
AIOPS runs as managed SaaS, self-hosted on your Kubernetes, or as a fully air-gapped sovereign install. Whichever you choose, the architecture is the same zero-trust, multi-tenant system — built for the strictest procurement review you can throw at it.
Three ways to run. One codebase.
Managed SaaS
Fastest path to production. Tenant isolation via row-level security and per-tenant encryption keys, with the full platform operated and monitored by OCEKS.
Foundation tier and aboveSelf-hosted Kubernetes
Deploy with production Helm charts and Terraform modules into your own cluster, in your own cloud account. Model data, prompts and evidence never leave your network.
Enterprise tier · Helm + Terraform + GitOpsAir-gapped sovereign
A complete offline bundle — images, charts, rules corpus and license — for classified networks and jurisdictions where nothing crosses the boundary. No phone-home, ever.
Sovereign tier · offline bundleThe parts procurement asks about first.
Zero-trust service mesh
SPIRE-issued workload identities with mutual TLS between every service — compromise of one component does not grant lateral movement.
Multi-tenant isolation
Row-level security in PostgreSQL, per-tenant encryption keys, and namespace isolation on Enterprise and Sovereign tiers.
SSO & identity
OIDC and SAML federation with your identity provider; short-lived JWTs with server-side revocation for every API session.
Observability
OpenTelemetry traces, Prometheus metrics and structured JSON logs with request correlation — pipe everything into your existing stack.
Resilience & DR
Multi-region deployment topologies, automated backups with tested restore runbooks, and durable workflows that survive infrastructure failure mid-run.
SLA with teeth
Uptime commitments backed by automatic service credits computed and applied by the billing engine — you don't have to ask.
Audit the engine your compliance depends on.
The components your regulator and your security team care most about are open source. No black-box scoring, no proprietary evidence formats, no lock-in on the artifacts that matter.
- aiops-rules — the ISO 42001 / NIST AI RMF scoring engine
- aiops-evidence-schema — the signed evidence package format
- aiops-kafka-sdk — model event instrumentation library
- Evidence verifies with standard Ed25519 tooling — no OCEKS software required
$ pip install aiops-evidence-schema
$ aiops-evidence verify package.zip \
--public-key tenant_signing.pub
✓ signature valid (Ed25519)
✓ ledger inclusion proof valid
✓ 88/88 control records well-formed
Bring your architecture review board.
We'll walk your security and platform teams through the deployment topology that fits your constraints — including air-gapped.