Runs where your data lives
Deploys into your OCI tenancy, your cloud, or ours. Direct TLS from the box or zero-inbound-ports tunnel mode. Nothing leaves unless you route it out.
iox is a governed AI platform you run in your own cloud. The box ships every AI component; cartridges teach it your domain; connectors reach any system — and your own developers extend it in governed terminals, the way modern teams build. Every call passes through guardrails and an audit log your compliance team can actually read.
Deploys into your OCI tenancy, your cloud, or ours. Direct TLS from the box or zero-inbound-ports tunnel mode. Nothing leaves unless you route it out.
Every AI tool call is policy-checked: per-role allowlists, confirm-gated writes, production-environment blocks, rate and budget caps.
Who asked, what the model did, which records were touched, what was approved. Exportable, inspectable, on your box.
Your report catalogs, schemas and resolutions indexed locally — hybrid search, no external vector service. The box learns your environment as data, not code.
Live health of every component — models, tools, caches, indexes, terminals — plus token usage and spend, in one screen.
Your own developers ship new applications, connectors and cartridges from governed terminals — new capability without loosening a single guardrail.
Read it left to right: a person asks, the agent reasons with private models and Claude on demand, every call passes through the guardrails, and the only path to your systems is the governed tool gateway. RAG, memory, cache and integration feed the agent; audit and superadmin sit under all of it.
High-volume data processing — extraction, classification, matching — runs on an open model fine-tuned to your domain, hosted privately.
Hard reasoning, advisory work and guided flows call Claude on demand through a gateway you control — BYOK, cached, budget-capped.
The router is policy, not code. Each install decides which task classes run private and which go frontier — visible, per-model, in the superadmin spend view.
Describe an endpoint — REST, SOAP, GraphQL, webhook or database — and iox turns it into a governed AI tool. No middleware to stand up, no per-connector project to staff.
Every connector inherits the platform's permission model and append-only log. A new integration is governed the day it ships — not policed by a separate system months later.
Your integration developer writes the connector in a governed browser terminal and ships it straight to the box. The system it reaches becomes just another set of governed tools.
Trusted developers extend the engine itself — runtime, guardrails, superadmin. The deepest role, granted narrowly.
Build new capabilities and screens on top of the box — governed by the same policies as everything else it runs.
Author connectors to new systems — every one inheriting the platform's guardrails and audit trail.
Developers bring their own Claude account or use a team seat. A manager sees who is building what, on which terminal, and at what cost — allocation and spend, per developer, in the same superadmin that governs everything else the box does.
The complete ERP tool surface — 66 governed tools across REST, BI Publisher, SOAP, ESS jobs, security and FBDI loads. Your custom report catalog indexed nightly.
Project budget monitoring on cached marts — BI Publisher extracts refreshed on schedule, served instantly, with drill-down screens and AI analysis.
NetSuite, Salesforce, a bespoke ERP — a cartridge declares its tools, knowledge, cache datasets, write policies and screens, and contributes its own roles, admin and capabilities to the platform. The box does the rest.
Every billable event is pre-flighted overnight and lands classified: green ready to bill, amber with the exact fix, red blocked with the reason.
a day of triage becomes a 20-minute reviewHeavy budget extracts are cached on the box and refreshed on schedule — instant drill-down from portfolio to line, with the AI explaining variances in context.
stale spreadsheets replaced by governed martsThe agent drafts the requisition or correction, a human approves the diff, and only then does the write execute — through policy, into the audit log.
zero unauthorized writes, by constructionA VM in your tenancy — or ours. One docker compose up brings up the appliance, worker, tools and edge.
The setup wizard collects your system credentials, AI keys and policies per cartridge. Secrets stay on the box — never baked into images.
The installer isn't done until the verifier says so: health, tools, data stores, TLS — checked end to end.
$ bash install/verify.sh → OK — 12 checks passed
Self-hosted in your OCI tenancy or any cloud you run — you own the box and the data path. Or managed by MeruTech, hosted and operated for you. Same product either way.
Public frontier models on your key for the hard thinking; a private, fine-tuned model for sensitive, high-volume work. And we can build, host and implement the private model for you — tuned to your domain, it's your asset.
See iox running against a live ERP — governed tools, private models, connectors and developer terminals, full audit.
Book a demo