AICP, the AI Control Plane
One control plane for all your company's AI, live in up to 20 days.
Secure login, model routing, chat, image generation, monitoring and compliance, fully managed by us.
GDPR / AI Act / CRA ready, hosted in the EU1
Exact timeline estimated per project, depending on access and response times.
The problem
Your company uses a dozen AI tools. Who's in control of them?
Scattered tools
Every team signs up for its own chat assistant, image generator and API key. Nobody has the full picture of who uses what.
Data at risk
Customer data, contracts and source code end up in prompts sent to services nobody reviewed, with no record of what left the company.
Costs out of control
Subscriptions and usage bills pile up across departments, and there is no single place to set a limit.
There's a better way: one control plane for all of it.
How it works
Four building blocks, one managed platform
AICP is assembled from proven open-source components and run by us. Each block can use what you already have.
Identity
Your people sign in with the accounts they already have.
- Your existing SSO
- Or we set up Authentik for you
Routing
Every request goes through one gateway that applies your rules, budgets and logging.
- LiteLLM
- Bifrost
- Or our own router
Chat and images
One familiar workspace for chat and image generation.
- Open WebUI or LibreChat with image generation
- ComfyUI as an optional add-on
Models
Use the models that fit each team and each kind of data.
- Your own API keys
- Self-hosted models on our infrastructure or yours
Path to go-live
From first conversation to go-live
- 1
Questionnaire or call
Tell us about your teams, tools and data, online or in a short call.
- 2
Tailored offer
You get an offer for your setup, hosting choice and support plan.
- 3
Kickoff
We agree on scope, access and the people involved on your side.
- 4
Setup
We deploy identity, routing, chat and models and connect your SSO.
- 5
Rollout
Departments get access with their own budgets and rules.
- 6
Training
Your people learn to use AI tools well and safely.
- 7
Go-live in up to 20 days
The control plane is in production use across your company.
- 8
Ongoing support
We keep every component updated, patched and monitored.
Exact timeline estimated per project, depending on access and response times.
Stay in control
Rules per department, enforced on every request
You decide who may use which models, with which data and up to which budget. AICP applies it to every request.
Budget limits
Monthly limits per department, team or person, so spending stays predictable.
Keyword and pattern blocking
Stop requests that contain terms or patterns you define, before they reach a model.
Redaction
Mask personal data, customer numbers or secrets automatically before a prompt leaves your control.
Alerts on flagged requests
Get notified when a request trips a rule, so someone can look at it.
For example
Design
- Models
- Creative and image models
- Budget
- Smaller budget
- Rules
- Image generation enabled
IT operations
- Models
- Advanced reasoning and coding models
- Budget
- Larger budget
- Rules
- Full model catalogue
Sales
- Models
- Chat only
- Budget
- Standard budget
- Rules
- Strict redaction of customer data
Configurator
Build your AI Control Plane
Pick one option per component, add your departments, and the diagram shows the setup we would run for you.
Components
Departments
Each department is a policy lane with its own models, budget and redaction.
Your setup
Setup summary
- Login: Your SSO
- Router: LiteLLM
- Chat interface: Open WebUI
- Image tool: Built-in image generation
- Models: Your own API keys (frontier models)
- Hosting: Our infrastructure (dedicated GPU servers)
Department lanes
- Design: Your own API keys (frontier models) · budget Small · redaction Standard
- IT operations: Your own API keys (frontier models) · budget Large · redaction Standard
- Sales: Your own API keys (frontier models) · budget Medium · redaction Strict · chat only
Login: Your SSO; Router: LiteLLM; Chat interface: Open WebUI; Image tool: Built-in image generation; Models: Your own API keys (frontier models); Hosting: Our infrastructure (dedicated GPU servers). Department lanes: 3.
Your choices go with you to the offer form. Nothing is sent until you submit it.
See all components
- Login
How your people sign in.
Default: Your SSO
Alternatives: Authentik, set up by us
- Your SSO: Connect your existing identity provider over OIDC or SAML.
- Authentik, set up by us: We run Authentik for you, with groups mapped to departments.
- Router
The gateway that routes every request to a model and enforces policy.
Default: LiteLLM
Alternatives: Bifrost
Our own solutions:Our own router Upgrade
- LiteLLM: Open-source gateway with broad provider support.
- Bifrost: Open-source gateway built for low latency.
- Our own router: Our router with department policies, redaction and audit built in.
- Chat interface
Where your people talk to the models.
Default: Open WebUI
Alternatives: LibreChat
- Open WebUI: Feature-rich chat with documents and tools.
- LibreChat: Familiar chat interface with agents and presets.
- Image tool
Image generation next to chat.
Default: Built-in image generation
Alternatives: None, ComfyUI add-on
- None: Text only.
- Built-in image generation: Image generation inside the chat interface.
- ComfyUI add-on: Node-based image workflows for design teams.
- Models
Which models the router can reach.
Default: Your own API keys (frontier models)
Alternatives: EU-region models, Self-hosted models
- Your own API keys (frontier models): Bring your keys for the major model providers.
- EU-region models: Models hosted in EU regions only.
- Self-hosted models: Open-weight models on dedicated GPUs.
- Hosting
Where the control plane runs.
Default: Our infrastructure (dedicated GPU servers)
Alternatives: Your infrastructure (we administer)
- Our infrastructure (dedicated GPU servers): We host and run everything on our dedicated GPU servers.
- Your infrastructure (we administer): Runs in your cloud or data centre, administered by us.
Hosting, always fully managed
Your infrastructure or ours. We run it either way.
Our infrastructure
Dedicated GPU servers for your company. Nothing for you to run.
Your infrastructure
You own the hardware. We are the sole administrators and keep it running.
Flat monthly pricing
One flat monthly fee, with no per-token fees.
Hosted in EU data centres.
Managed support plans
We keep your AI stack up to date so your team doesn't have to.
6 or 12 month contracts
Pick the term that suits you. Contracts renew automatically.
Upgrades, patches and maintenance
Every component of the stack, from login to models, kept current by us.
Security updates and monitoring
Security fixes applied as they are released, and the platform continuously monitored.
Compliance services
Meet AI Act, GDPR and Cyber Resilience Act requirements, with our help.
Security supply chain
SBOMs, signed images and automated updates, aligned with the Cyber Resilience Act.
Training
AI literacy training for your staff, one of the AI Act's first obligations.
Integration
Logging, data protection and human oversight built into how your teams use AI.
Hosting
EU infrastructure, so your data stays under European law.
Read more
Why trust AICP
Built on proven open source, run in the EU
Certifications
- Currently in renewal, available soon
- Currently in renewal, available soon
- Currently in renewal, available soon
Proven open source
Every component is widely used open-source software with an active community, so there is no lock-in to a closed product.
EU hosting
The platform runs in EU data centres by default, under European data protection law.
CRA-aligned supply chain
- A software bill of materials (SBOM) for every release
- Signed container images, verified before deployment
- Automated dependency and security updates
- Vulnerability handling through a published security contact
1 Ready means AICP covers key requirements of these regulations: AI literacy, oversight, data protection and a secure software supply chain. How it applies to your company is described in the security whitepaper. Security whitepaper
Security and privacy contacts
Security contact: [email protected] (security.txt)
Privacy contact: [email protected] (Privacy policy)
Downloads
Presentations and security whitepaper
Free to download, no sign-up needed.
AICP presentation
An overview of the platform, the building blocks and the path to go-live.
Available soonSecurity whitepaper
How AICP handles data, access, updates and the software supply chain.
Available soon
FAQ
Frequently asked questions
Where is our data stored?
In the EU, in our data centres or in yours. Hosted in EU data centres. Nothing is sent to a model provider you have not chosen.
Who owns the infrastructure?
You choose. On our infrastructure we provide dedicated GPU servers and you have nothing to run. On your infrastructure you own the hardware and we administer it for you.
Why don't we get admin access?
We are the sole administrators so that we can guarantee security, updates and compliance. Your team manages users, departments, budgets and rules; we run the platform underneath.
Which models can we use?
Your own API keys for frontier models, EU-hosted models, or self-hosted open models on our infrastructure or yours. You can mix them per department.
Can we keep our existing SSO?
Yes. AICP connects to your existing identity provider. If you don't have one, we set up Authentik for you.
What if our AI tools change?
Components are swappable. If a better chat interface, router or model comes along, we replace that part without rebuilding the rest.
How fast can we go live?
In up to 20 days. The exact timeline is estimated per project, depending on access and response times.
Does AICP cover the AI Act, GDPR and CRA?
It covers key requirements: AI literacy, oversight, data protection and secure software supply chain.
What happens when the contract ends?
Contract renews automatically. If you leave, we provide an included migration plan and export your data (users, logs, settings). Our configuration and setup remain our property.
Ready to take control of your company's AI?
You'll talk to business development by default; ask for an engineer any time.