One install
Applications attach. They do not replace it.
Platform
The runtime comes first.
Private AI Foundation is the install. DocxIntel and AgentLab are applications on that install. You review the perimeter once. Everything that follows runs on the same audit trail.
Open weights
Apache 2.0 and MIT only, on disk.
You hold keys
In every tier that touches your data.
No egress
Inference does not need a network path out.
How the stack is installed
Perimeter
Air-gapped, your cloud tenancy, or bare metal. The substrate changes. Key custody does not.
Foundation
Serving, Model Gateway, governance, RBAC, audit and data protection land once.
Applications
DocxIntel reads documents. AgentLab acts on what they said, same install.
Proof of value
30–45 days on one document type in your environment, success criteria in writing.
What ships in the runtime
Model serving
Open-weight vision, LLM, embeddings and reranking, run where the data already sits.
Model Gateway
Every prompt, completion and tool call on one controlled path. No side door.
Governance
Policy and DLP see the request before weights do. Human-in-the-loop on consequential actions.
RBAC
Who may invoke which model class on which data class. Named, not implied.
Immutable audit
Logs written where the workload runs. Disconnect the network and they still fire.
Data protection
Encryption with keys you hold. Nothing is retained by BizfyLabs, because it never reaches us.
Four layers of the platform
- Model serving
- Gateway
- Governance
- RBAC
- Audit
- Data protection
The runtime. Installed once, inside your perimeter.
- Prompt path
- Tool calls
- Model class routing
- No public endpoint
Policy sees the request before weights do.
- Policy
- DLP
- Human-in-the-loop
- Immutable logs
A report generated after the fact is not governance.
- Air-gapped
- Your cloud tenancy
- Bare metal
- Evaluation sandbox
The substrate changes. You still hold the keys.
Why the runtime is the product
One security review
Applications inherit the install. You do not re-litigate the perimeter for each feature.
Open licences
Apache 2.0 and MIT weights only. Licence text ships on disk. No usage gate a vendor can revise later.
Customer as processor
We license software. We never hold production data. You are controller and processor.
Fixed commercial model
Annual licence, volume-tiered applications, named fixed-fee deployment. Not per page. Not per token.
The full stack on one machine, disconnected from the network.
In your office, on your documents, with the cable pulled out. No competitor's sales engineer can do this.