Skip to content
The AI operating system for the enterprise

Every agent. Every model. One operating system.

Discover every agent. Route every request. Enforce every policy. Account for every dollar. Built for regulated enterprises and deployed where your data must stay: our cloud, yours, or fully air-gapped.

Works with

Salesforce
NVIDIA Inception Program badgeMember of NVIDIA Inception
Why now

Agents went to production faster than the controls around them.

Agents call models, tools and internal systems on their own. Policies written in documents don't stop a request, and dashboards built after the fact don't stop a bill.

No one knows the full list

Agents live in clouds, SaaS suites, Kubernetes clusters and developers' laptops. Inventories built from spreadsheets go stale in weeks.

Written policy isn't enforced policy

A rule against sending customer data to a model means nothing unless something checks every request, before the model sees it.

AI spend has no owner

Provider invoices arrive per account, not per agent, team or product. Finance can't allocate what it can't attribute.

Product tour

From a new agent to audit evidence in four steps.

Click through the real screens with demo data: register an agent, watch a policy stop a request, see the cost land and export the record.

Product tour · demo data
Clovie · Agents · Register agent
Register agent
Details
Name
Card Dispute Triage
Owner team
Cards & Payments
Project
Customer Channels
Environment
Development
Monthly budget
$2,000
Agent keyShown once
Copy it nowcv_dev_card-dispute-triage_••••3f9a
RegisteredOwner, budget and policies apply from the first call
Waiting for first callPoint the agent's base URL at the gateway
Clovie · Activity · Audit log
Audit log
TimeAgentModelDecision
14:02:11Card Dispute Triagegpt-4oDeny
14:01:58Fraud Alert Triageclaude-sonnet-4.5Allow
Decision403 policy_denied
Policy
Card numbers stay out of prompts
Mode
Enforcing
Reason
Card number found in the prompt
Provider call
Not made
Request
UserCustomer disputes a charge on card [CARD-1]. Draft a reply.
Clovie · Costs · Ledger
Costs
Spend this month
$41,280
at your negotiated rates
Card Dispute Triage · month
$1,240
Blocked before the call
$0.00
no provider cost
AgentTeamTokensCost
Card Dispute Triagethis request, blockedCards & Payments0$0.00
Fraud Alert TriageCards & Payments18,420$0.31
KYC Document ReviewKYC Operations42,905$0.74
Clovie · Compliance · Evidence packs
Evidence pack
Export
Audit record
Agent
Card Dispute Triage
Decision
Deny
Policy version
v3, enforcing
Recorded
14:02:11 UTC
OSFI E-23 · last 30 days
PDF
summary.pdfOverview of the period
JS
decisions.jsonEvery decision, each signed (Ed25519)
JS
osfi_e23_control_crosswalk.jsonDecisions mapped to OSFI E-23 controls
#
manifest.jsonSHA-256 of every file, and the public key
Checksums and signatures verified
Inline, not after the fact

Control happens before the model answers.

The Clovie gateway sits in the request path. It identifies the agent, checks kill switches, policies, budgets and guardrails, then forwards the request with your provider key, or stops it with a reason.

  • One URL change. Agents keep their OpenAI or Anthropic SDKs and point at Clovie.
  • Or no change at all. Zero-code routing through your DNS or proxy, or enforcement through the AI gateway you already run.
  • Your call on failure. If a check can't run, continue with an alert or refuse, per organization.
CallerYour agentits own agent keyClovie gatewayIdentify agentkey or workload identityKill switchagent and organizationPolicy decisionOPA: allow, deny, approveBudget and limitschecked before the callGuardrailsPII, secrets, topicsOutcomeForwardedwith your provider keyBlockedwith code and reasonHeldfor a person to approveRecordAudit logagent, policy, reasonCost ledgerpriced, attributedCallerYour agentits own agent keyClovie gatewayIdentify agentkey or workload identityKill switchagent and organizationPolicy decisionOPA: allow, deny, approveBudget and limitschecked before the callGuardrailsPII, secrets, topicsOutcomeForwardedwith your provider keyBlockedwith code and reasonHeldfor a person to approveRecordAudit logagent, policy, reasonCost ledgerpriced, attributed

How one request is governed.

Digital twin

From the GPUs in the data hall to the agents running on them.

The Control Center draws your data hall as a floor plan and in 3D, from the same facility model. Every rack is shaded by heat, load or power, hot racks are outlined, and each one links to the agents and spend it carries.

Control Center · Floor plan
Digital twin
Data hall EastSimulatedHeatLoadPowerFloor plan3D
Load
71%
PUE
1.31
Power
2.4 / 3.7 MW
Hot racks
3
GPU thermal headroom
6 °C
Cooling COP
4.2
ABCDEFRack A-01, inlet 22.6 °CRack A-02, inlet 23.9 °CRack A-03, inlet 23.3 °CRack A-04, inlet 23.3 °CRack A-05, inlet 24.9 °CRack A-06, inlet 25.6 °CRack A-07, inlet 24.8 °CRack A-08, inlet 24.9 °CRack A-09, inlet 25.6 °CRack A-10, inlet 24.8 °CRack A-11, inlet 23.2 °CRack A-12, inlet 23.4 °CRack A-13, inlet 23.9 °CRack A-14, inlet 22.5 °CRack B-01, inlet 22.7 °CRack B-02, inlet 22.3 °CRack B-03, inlet 23.7 °CRack B-04, inlet 24.8 °CRack B-05, inlet 24.1 °CRack B-06, inlet 24.3 °CRack B-07, inlet 25.9 °CRack B-08, inlet 25.9 °CRack B-09, inlet 24.2 °CRack B-10, inlet 24.1 °CRack B-11, inlet 24.8 °CRack B-12, inlet 23.7 °CRack B-13, inlet 22.3 °CRack B-14, inlet 22.7 °CRack C-01, inlet 23.3 °CRack C-02, inlet 24.6 °CRack C-03, inlet 24.1 °CRack C-04, inlet 23.9 °CRack C-05, inlet 25.5 °CRack C-06, inlet 26.3 °CRack C-07, hot, inlet 27.9 °CRack C-08, hot, inlet 28.3 °CRack C-09, inlet 26.3 °CRack C-10, inlet 25.5 °CRack C-11, inlet 24.0 °CRack C-12, inlet 24.1 °CRack C-13, inlet 24.6 °CRack C-14, inlet 23.3 °CRack D-01, inlet 23.4 °CRack D-02, inlet 23.0 °CRack D-03, inlet 24.3 °CRack D-04, inlet 25.5 °CRack D-05, inlet 24.9 °CRack D-06, inlet 24.9 °CRack D-07, inlet 26.6 °CRack D-08, inlet 26.6 °CRack D-09, inlet 25.0 °CRack D-10, inlet 24.8 °CRack D-11, inlet 25.4 °CRack D-12, inlet 24.5 °CRack D-13, inlet 23.0 °CRack D-14, inlet 23.3 °CRack E-01, inlet 22.5 °CRack E-02, inlet 23.9 °CRack E-03, inlet 23.5 °CRack E-04, inlet 23.2 °CRack E-05, inlet 24.7 °CRack E-06, inlet 25.6 °CRack E-07, inlet 24.9 °CRack E-08, inlet 24.8 °CRack E-09, inlet 25.5 °CRack E-10, inlet 24.9 °CRack E-11, inlet 23.3 °CRack E-12, hot, inlet 27.4 °CRack E-13, inlet 23.9 °CRack E-14, inlet 22.7 °CRack F-01, inlet 22.8 °CRack F-02, inlet 22.3 °CRack F-03, inlet 23.6 °CRack F-04, inlet 24.8 °CRack F-05, inlet 24.2 °CRack F-06, inlet 24.2 °CRack F-07, inlet 25.8 °CRack F-08, inlet 26.0 °CRack F-09, inlet 24.3 °CRack F-10, inlet 24.0 °CRack F-11, inlet 24.7 °CRack F-12, inlet 23.8 °CRack F-13, inlet 22.3 °CRack F-14, inlet 22.5 °C
Rack C-08 Row C Hot: inlet above 27 °C
GPUs available
30 of 32
Busy
94%
Power
31.8 of 34 kW
Inlet
28.3 °C

4 nodes · NVIDIA H100 80GB HBM3 · thermal headroom 3 °C

Running on this rack
SQL Analytics Copilotllama-3.3-70b-instruct$1,920
Threat Intel Summarizerllama-3.3-70b-instruct$860
Platform Runbook Agentllama-3.3-70b-instruct$310
Control Center · 3D
Digital twin
Data hall EastSimulatedHeatLoadPowerFloor plan3D
Load
71%
PUE
1.31
Power
2.4 / 3.7 MW
Hot racks
3
GPU thermal headroom
6 °C
Cooling COP
4.2
ABCDEF2 hotHot

Product views with simulated telemetry. Simulated data is always labelled in the console.

Built for the frameworks you answer to

Evidence from what actually happened.

Controls mapped to the frameworks your auditors, supervisors and security teams use, with evidence packs exported from real decisions.

  • EU AI Act: EU Artificial Intelligence Act
  • SOC 2: SOC 2 Type II trust services criteria
  • NIST AI RMF: NIST AI Risk Management Framework
  • ISO/IEC 42001: ISO/IEC 42001 AI management system
  • OSFI E-23: OSFI Guideline E-23, model risk management (Canada)
  • OWASP Top 10: OWASP Top 10 for LLM applications and agentic AI
Depth you can check

Built to fit the enterprise you already have.

4
ways to connect
Endpoint, zero-code, front door or Copilot
9
connectors
Clouds, Kubernetes, providers and SaaS
9
AI gateways
The ones you run, plus OpenTelemetry
13
guardrail options
Your vendors or your own webhook check
5
compliance packs
Mapped controls and signed evidence
4
deployments
SaaS or VPC, on-premises or air-gapped
Architecture

A control plane you can place anywhere.

The console, policy engine, registry, cost ledger and audit trail form the control plane. Gateways form the data plane, and they can run next to your agents.

SourcesAgents you buildOpenAI / Anthropic SDKsVendor agentsCopilot Studio, BedrockCoding agentsClaude Code, CodexClouds and SaaSfor discoveryData planeClovie gatewayinline enforcementZero-code routingyour DNS or proxyYour AI gatewayKong, Apigee, EnvoyAgent front doorvendor agent APIsControl planeRegistryagents, keys, ownersPolicy engineOPA, monitor firstCost ledgerprice books, budgetsAudit traildecisions and changesOutputsConsoleControl CenterEvidence packssigned, checksummedYour SIEMSplunk, Datadog, OTLPData lakeS3, GCS, BlobSourcesAgents you buildOpenAI / Anthropic SDKsVendor agentsCopilot Studio, BedrockCoding agentsClaude Code, CodexClouds and SaaSfor discoveryData planeClovie gatewayinline enforcementZero-code routingyour DNS or proxyYour AI gatewayKong, Apigee, EnvoyAgent front doorvendor agent APIsControl planeRegistryagents, keys, ownersPolicy engineOPA, monitor firstCost ledgerprice books, budgetsAudit traildecisions and changesOutputsConsoleControl CenterEvidence packssigned, checksummedYour SIEMSplunk, Datadog, OTLPData lakeS3, GCS, Blob

Control plane and data plane. Gateways can run in Clovie’s cloud or next to your agents.

Deployment

Same features wherever it runs.

Start in our cloud and move inside your network later, or start air-gapped. One codebase, the same signed images, a licence checked offline.

SaaSOperated by Clovie
Customer VPCAWS, Google Cloud, Azure
On-premisesKubernetes or a single host
Air-gappedNo internet access
Hybrid gatewaysRequest content stays local
Multi-tenantFor partners and resellers

Bring your agents under control without slowing anyone down.

Connect one agent, add a policy in monitor mode and find its audit record. Then decide what to enforce.