Deploy, expose, observe, and monitor private AI inside your boundary.

Operated by Iftah. Controlled by you.

Six integrated products. One governance layer. Nothing assembled from scratch. Iftah gives your platform team a production-ready AI stack — deployed in your environment, governed from your control plane, with no external dependency in the data path.

Six integrated products. One governed AI platform.

Govern, deploy, expose, monitor, and secure AI workloads inside your customer-controlled environment.

Users & Applications

EmployeesDevelopersAgents / ServicesBusiness Apps

Iftah AI Governance Platform

Unified Policy & Metadata Layer

Six integrated products

Iftah Gatekeeper

Access & Governance Control Plane

Iftah Gateway

Governed AI Access Gateway

Iftah Deploy

Model & App Deployment

Iftah Observe

Visibility & Monitoring

Iftah AI Service

AI Operations Management

Iftah ClusterGuard

Infrastructure & Cluster Security

AI Workloads & Endpoints

Private ModelsHosted ModelsSaaS ModelsTools & APIs

Customer Environment — Governed by You

What stays under your control?

Identity & Access

Your identity provider, SSO & MFA

Data & Storage

Your data, in your region, encrypted at rest

Model Serving

Isolated, scalable model endpoints

Runtime & Compute

Your cloud / VPC, private connectivity

Audit & Evidence

Immutable audit logs, evidence & retention

Monitoring, integrations & compliance

Iftah Observe — Cross-Platform Visibility & Audit

Logs & EventsMetrics & TracesAudit & ComplianceRisk & PostureAlerts & NotificationsReports & Exports

External Integrations

SIEM / SOAR · ITSM / Ticketing · Data Loss Prevention · Email / Slack / Teams · Custom Integrations

Compliance Frameworks

SOC 2 · ISO 27001 · HIPAA · NIST · Custom Requirements

Core principles

You Own Your Data

Policy Everywhere

Secure by Design

•

Users & Applications

Employees

Developers

Agents / Services

Business Apps

•

Iftah AI Governance Platform

Iftah Gatekeeper

Access & Governance Control Plane

Policy management
Roles & permissions
Approval workflows
Policy distribution

Iftah Gateway

Governed AI Access Gateway

Unified AI access
Policy enforcement
Guardrails (PII, safety)
Request routing

Iftah Deploy

Model & App Deployment

Model lifecycle
Environment isolation
Rollouts & promotion
Secure configuration

Iftah Observe

Visibility & Monitoring

Usage & performance
Policy & risk monitoring
Drift & anomaly detection
Dashboards & alerts

Iftah AI Service

AI Operations Management

Model catalog & registry
AI service orchestration
Evaluation & quality
Cost & capacity

Iftah ClusterGuard

Infrastructure & Cluster Security

Workload protection
Network policies
Configuration drift
Compliance enforcement

Unified Policy & Metadata Layer

•

Iftah Observe — Cross-Platform Visibility & Audit

Logs & Events

Metrics & Traces

Audit & Compliance

Risk & Posture

Alerts & Notifications

Reports & Exports

•

AI Workloads & Endpoints

Private Models

Hosted Models

SaaS Models

Tools & APIs

•

Customer Environment — Governed by You

Identity & Access

Your identity provider, SSO & MFA

Data & Storage

Your data, in your region, encrypted at rest

Model Serving

Isolated, scalable model endpoints

Runtime & Compute

Your cloud / VPC, private connectivity

Audit & Evidence

Immutable audit logs, evidence & retention

•

External Integrations

SIEM / SOAR

ITSM / Ticketing

Data Loss Prevention

Email / Slack / Teams

Custom Integrations

•

Compliance Frameworks

SOC 2

ISO 27001

HIPAA

NIST

Custom Requirements

•

Core Principles

You Own Your Data

Data stays in your environment, 100% under your control.

Policy Everywhere

Consistent enforcement across users, models, and workloads.

Secure by Design

Least privilege, zero trust, defense in depth.

Auditable & Compliant

Complete visibility, immutable evidence, regulatory ready.

Scalable & Extensible

Built for scale and future innovation.

Users & Applications

Employees

Developers

Agents / Services

Business Apps

Iftah Gatekeeper

Access & Governance Control Plane

Policy management
Roles & permissions
Approval workflows
Policy distribution

Iftah Gateway

Governed AI Access Gateway

Unified AI access
Policy enforcement
Guardrails (PII, safety)
Request routing

Iftah Deploy

Model & App Deployment

Model lifecycle
Environment isolation
Rollouts & promotion
Secure configuration

Iftah Observe

Visibility & Monitoring

Usage & performance
Policy & risk monitoring
Drift & anomaly detection
Dashboards & alerts

Iftah AI Service

AI Operations Management

Model catalog & registry
AI service orchestration
Evaluation & quality
Cost & capacity

Iftah ClusterGuard

Infrastructure & Cluster Security

Workload protection
Network policies
Configuration drift
Compliance enforcement

Unified Policy & Metadata Layer

AI Workloads & Endpoints

Private Models

Hosted Models

SaaS Models

Tools & APIs

Iftah Observe — Cross-Platform Visibility & Audit

Logs & Events

Metrics & Traces

Audit & Compliance

Risk & Posture

Alerts & Notifications

Reports & Exports

External Integrations

SIEM / SOAR

ITSM / Ticketing

Data Loss Prevention

Email / Slack / Teams

Custom Integrations

Customer Environment — Governed by You

Identity & Access

Your identity provider, SSO & MFA

Data & Storage

Your data, in your region, encrypted at rest

Model Serving

Isolated, scalable model endpoints

Runtime & Compute

Your cloud / VPC, private connectivity

Audit & Evidence

Immutable audit logs, evidence & retention

Compliance Frameworks

SOC 2

ISO 27001

HIPAA

NIST

Custom Requirements

Core Principles

You Own Your Data

Data stays in your environment, 100% under your control.

Policy Everywhere

Consistent enforcement across users, models, and workloads.

Secure by Design

Least privilege, zero trust, defense in depth.

Auditable & Compliant

Complete visibility, immutable evidence, regulatory ready.

Scalable & Extensible

Built for scale and future innovation.

What each means for a regulated deployment.

Time to governed pilot

Build Your Own (DIY): 12–18 months
Consulting / SI Build: 3–6 months
Iftah: 12 weeks

Security review effort

Build Your Own (DIY): Bespoke, every component
Consulting / SI Build: Bespoke, every site
Iftah: Productized baseline + delta

View 4 more comparisons

Audit evidence

Build Your Own (DIY): You build it
Consulting / SI Build: SI-generated
Iftah: Inside your environment

open model support

Build Your Own (DIY): You source it
Consulting / SI Build: You source it
Iftah: Included

Lock-in risk

Build Your Own (DIY): Low but high effort
Consulting / SI Build: High (SI dependency)
Iftah: None — open standards

Ongoing updates

Build Your Own (DIY): Your team's capacity
Consulting / SI Build: Contract renewal
Iftah: Named SRE + version cadence

Criterion	Build Your Own (DIY)	Consulting / SI Build	Iftah
Time to governed pilot	12–18 months	3–6 months	12 weeks
Security review effort	Bespoke, every component	Bespoke, every site	Productized baseline + delta
Audit evidence	You build it	SI-generated	Inside your environment
open model support	You source it	You source it	Included
Lock-in risk	Low but high effort	High (SI dependency)	None — open standards
Ongoing updates	Your team's capacity	Contract renewal	Named SRE + version cadence

The platform

Six products. One governed platform.

Each product does one job well and shares the same identity, policy, and audit plane — so you can deploy, govern, observe, and prove private AI end to end.…

More context

Run any Hugging Face or open model, on any cloud or on-prem, multi-cloud or hybrid.

Six products. One governed platform.

Each product does one job well and shares the same identity, policy, and audit plane — so you can deploy, govern, observe, and prove private AI end to end. Run any Hugging Face or open model, on any cloud or on-prem, multi-cloud or hybrid.

Iftah Deploy

Ship and govern private model workloads through GitOps.

Launch, update, and roll back private model deployments through a signed, versioned pipeline. Every change is auditable, with staged canary-to-fleet rollouts and one-click rollback to a previously approved version — online or fully air-gapped.

Without a governed deployment model, models enter production without a lifecycle owner — no version control, no rollback, no audit of what changed. Deploy manages the full AI lifecycle with signed artifacts in your registry.

GitOps delivery of signed bundles
Staged canary-to-fleet rollout
One-click rollback to a pinned version
Air-gapped offline update bundles
Live model inventory, versions & cache state
Full audit of what is running where

Governed access

CTOCIOCISO

Iftah Gateway

One OpenAI-compatible endpoint for every approved model.

A single governed gateway for all your apps, agents, and assistants. Identity-aware routing to approved models, per-team rate limits and budgets, usage attribution, and guardrails on every request — with the served model verified against what was approved.

Without a policy-checked gateway, every AI call is a blind spot — no identity, no quota, no guardrail, no trace. Gateway puts a governed checkpoint on every request before it reaches any model.

OpenAI-compatible API
Approved-model access groups
SSO-backed virtual keys
Rate limits & budgets per team
PII/PHI & prompt-injection guardrails
Served-model verification

Iftah Enterprise RAGmultilingual retrieval

Preview

Retrieval & knowledge

CDOCISOData Team

Iftah Enterprise RAG

multilingual knowledge, inside your boundary.

Retrieval-augmented generation built for regulated content from the ground up — your domain terminology, complex document workflows, and leading open models. It runs inside your boundary and is governed by the same gateway and audit trail as every other Iftah workload.

Public models treat regulated content as an afterthought — English-first tokenizers, thin dialect coverage, and no right-to-left document handling. Iftah Enterprise RAG is built for your content first, so retrieval and generation stay accurate on your own regulated content.

US dialect and MSA retrieval
RTL document ingestion and chunking
Leading open-model support
Multilingual query routing
Governed access — same gateway, same audit trail

Purpose-built for regulated content — not retrofitted.

Tracing & evaluation

CISOComplianceCIO

Iftah Observe

See and prove every request — traces, cost, and quality.

Full visibility into every call: request traces, latency, token and cost breakdowns, and quality evaluations. Configurable prompt/response handling, redaction, and metadata-only modes keep observability compatible with your data-handling rules.

Regulators don't accept 'we believe it ran correctly.' Observe captures signed, content-free traces, runtime health, and cost attribution — exportable audit evidence, generated inside your boundary.

End-to-end request traces
Latency, token & cost dashboards
Quality evaluations
Redaction & metadata-only modes
Sampling & retention controls
Per-team and per-app attribution

Policy & authorization

CISOAI Governance

Iftah Gatekeeper

The policy decision point — default-deny on every request.

Every request is authorized against policy before it reaches a model: identity and data classification are checked, the request is pinned to an approved deployment, and anything not explicitly allowed is denied. Decisions are fast, fail-closed, and recorded in a content-free audit trail.

Agentic AI without a policy decision point is the governance gap your CISO cannot close. Gatekeeper is default-deny — no agent acts without an explicit, logged policy allow.

Policy-as-code decisions
Default-deny, fail-closed
Identity + classification checks
Deployment pinning (no substitution)
Retrieval attestation for RAG
Content-free decision audit

Sizing & readiness

CTOML Team

Iftah AI Service

Right-size, generate, and prove readiness before go-live.

The control service that turns a model choice into a deployable, reviewable plan: GPU sizing for your concurrency and latency targets, generated deployment manifests, dry-run policy checks, and a readiness report your reviewers can sign off before anything goes live.

Building a regulated AI serving layer from scratch takes a year of security review. AI Service gives you a production-ready layer with residency guarantees built in from day one.

GPU & capacity sizing
Deployment manifest generation
Dry-run policy validation
Readiness & decision reports
Concurrency / latency planning
GitOps hand-off to Deploy

Iftah ClusterGuardAdmission policies

Preview

Cluster admission control

SecurityPlatform

Iftah ClusterGuard

Only approved, signed artifacts ever run.

Admission control at the Kubernetes boundary: only signed, approved images and configurations are allowed to run, unauthorized or drifted changes are blocked, and every denial is recorded. Namespace isolation and network policies keep workloads contained.

One misconfigured cluster pulls your entire sovereign deployment out of compliance. ClusterGuard monitors drift, health, and policy alignment continuously — not just at audit time.

Admission policy enforcement
Signed-image / approved-artifact gating
Drift & tamper prevention
Namespace isolation
Network ingress/egress policies
Audited denials

Next step

Review Iftah AI against your environment before choosing the first workload.

Book an architecture review