Data and control remain with the client
Every component that processes client data, including the language models, runs inside the client's own environment, on premises or in a private cloud tenancy. Kamino supplies software and engineering. It does not hold client data.
Deployment options
On-premise
Installed on servers in the client's data centre, including model serving. Suited to regulated operations and restricted networks.
Private cloud
Deployed within the client's own cloud tenancy, under the client's account, network policy and choice of region.
Security architecture
Self-hosted models
Open-weight language models are served on compute inside the client environment. Prompts, retrieved records and outputs are never sent to an external model provider.
No client data held by Kamino
Source data, the Tabula model, Metron run records and the audit trail are stored only within the client environment. Kamino retains no copy.
Gateway-mediated access
Agents reach systems of record only through the secure gateway, under least-privilege service accounts and read-only by default. Every request is logged and may be halted.
One-way software delivery
Kamino delivers signed software releases into the environment. No channel carries client data outward.
Model routing within the boundary
Each task is assigned to an appropriate model among those deployed. Models are added or replaced without moving data.
Scale within the environment
Model serving and agent execution scale as additional nodes inside the client environment. Each deployment is a dedicated installation with no shared multi-tenant store.
Data residency
The location of every class of data in a Kamino deployment.
| Client environment | Kamino | |
|---|---|---|
| Source data and systems of record | None | |
| Tabula model | None | |
| Metron run records and audit trail | None | |
| Prompts, retrieved records and model outputs | None | |
| Model weights and inference | None | |
| Software releases | Installed | Built and signed |
Enterprise AI should answer to the organisation that owns the data.
Approach→