Policy outside the model
Authorisation, budgets and forbidden actions are decided by a deterministic contour, with a customer-visible audit trail.
A pilot runs for thirty to sixty days against two or three real workflows, with a baseline and success criteria agreed before it starts — and a weekly outcome review that does not quietly widen the scope.
Four things every enterprise deployment keeps, whichever tier you choose.
Authorisation, budgets and forbidden actions are decided by a deterministic contour, with a customer-visible audit trail.
Shared, isolated pool, dedicated cell, customer VPC or fully self-hosted — including air-gapped delivery.
SAML, OIDC, passkeys, SCIM, RBAC with attributes, separation of duties and just-in-time access.
Bring your own models and endpoints, or run on-premise. No deal is allowed to break model or cloud neutrality.
Four steps, in this order, with the same numbers at both ends.
What you are evaluating, which workflows carry the risk, and who signs the outcome off.
Current cost, latency and review time for those workflows, measured with you before anything changes.
Two or three real workflows, a weekly outcome review, and no quiet widening of the scope.
Rollout, a second pilot, or a clean stop — decided against the baseline, not against a demo.
These addresses are published on the policy pages and reach the right team without a sales detour.
Access, correction, export or erasure of personal data. Answered within 30 days.
Coordinated disclosure of a vulnerability in the product or the service.
Contracts, DPAs and formal notices from your legal team.
Astvyr has not been released, no builds are published and there is no early-access programme. The planned release date is 7 July 2027; prices are not yet determined. Until then the useful thing to do is tell us about your repository, your delivery path and what you would need to trust an agent with a change.
Choose your boundary: shared, your VPC, or fully self-hosted.
DPA · residency · air-gapped