Four pillars. One installed platform.
Udal is a complete paved road for AI agents — not a single feature. It installs inside your environment and delivers the whole lifecycle: author, check, promote, govern, observe.
Stays on your ground
Every component installs inside your Kubernetes environment — EKS, AKS, GKE, OpenShift or bare metal, including fully air-gapped. Frontier models are reached in-tenant (Bedrock, Azure OpenAI) or served on your own GPUs from open weights. The vendor never sees your data, and the platform can prove it.
- • Signed air-gap install bundle
- • Self-hosted open-weights serving
- • In-tenant frontier models
- • Sanitised diagnostics
- • No outbound telemetry
Governed by default
A central gateway screens every model call and tool invocation before it happens — policy, safety, PII redaction, rate limits and cost. Agents act with the invoking user's permissions, never an all-powerful service account. Per-project budgets set by an admin override an agent's own manifest and can force a kill switch the author cannot loosen.
- • Policy-as-code (OPA)
- • PII redaction & prompt-injection guard
- • Dual-control approvals (SoD)
- • Per-team hard budget kill-switch
- • Sandboxed agent runtime
A paved road
Teams describe an agent in a readable manifest and write only the custom logic in Python. CI runs evals and policy gates; GitOps promotes an immutable, signed image digest through dev, staging and production with a manual gate on prod. Days, not months.
- • Declarative agent manifest
- • Typed Python SDK
- • Argo CD + GitOps promotion
- • Durable orchestration (Temporal)
- • Human-in-the-loop pauses
Provable evidence
Every decision, model call, tool use, approval and admin action is written to an HMAC hash-chained audit log. The platform's own records are mapped to SOC 2, ISO 27001 and NIST 800-53 controls and exported as a sealed, control-mapped evidence report an assessor can trace control by control.
- • HMAC hash-chained audit log
- • SOC 2 / ISO 27001 / NIST 800-53 mapping
- • OpenTelemetry tracing
- • Cost attribution per team
- • SLSA v1 provenance
See the lifecycle in full.
From a declarative manifest to a governed run, all on your own infrastructure.
Install Udal in your environment.
Technical briefing, not a sales deck. A human replies within one working day.
Request access