Your infrastructure
Run LibraOS on-premise or in a private cloud. Place models, knowledge stores, and application services where your requirements allow.
Choose where your data lives, which models your app uses,
and where actions need approval.
Run LibraOS on-premise or in a private cloud. Place models, knowledge stores, and application services where your requirements allow.
For an air-gapped setup, use local models and connectors and validate all network dependencies, logs, and update paths.
Configure permissions, approval points, and audit for the tasks your app runs through LibraOS. Review the execution path before launch.
LibraOS provides three tiers of AI firewall screening. Configure them for your models and workflows, then evaluate both detection and task quality.
Screening reduces risk; it does not guarantee that every harmful prompt or response will be detected.
Rules identify configured injection patterns and sensitive-data formats.
A classifier assesses requests and responses beyond the pattern checks.
A judge model evaluates ambiguous cases according to the configured policy.
Make your review points, source access, and audit requirements part of the application design.
Tasks running through LibraOS can use its configured permissions, approval points, and audit. Test the behavior against your application’s actual actions.
Routing a model request through LibraOS applies controls at that request boundary. Tools, shell commands, and network activity outside the Runtime require their own enforcement.
Review data placement, identity, models, tool permissions, logs, and support with our team.
Review the documented controls, deployment boundary, and operating responsibilities for the service you are evaluating.
Confirm the agreements, responsibilities, and technical controls required for your regulated use case before deployment.
Canadian-jurisdiction deployment is available. Confirm the placement of customer data, model traffic, logs, and knowledge stores within the selected environment.