Private AI productivity governance

Turn AI into governed,
private productivity for your enterprise

One control plane that meters, protects and governs AI on your private compute — for Trio clients and for the agents you already run.

Trio clients
Desktop agent on the employee machine

Files stay on the device. Tools run in an OS-native sandbox; OCR and PII checks run locally before anything is sent.

Best for: confidential documents, professional firms

Not using Trio? Your own agents connect through the gateway with one key per agent.

How it works

Apps on top are your choice. The compute underneath is always private. ASN sits between them, so every model call passes one set of rules.

Apps · open
Trio Local, Web, Task — or your own agents

Desktop, browser, scheduled tasks, or any app that speaks the OpenAI-compatible API.

Agent Service Now
Identity · PII · policy · metering · credit pools · audit

Checks who is calling, masks personal data, applies model and content rules, reserves credit, and records usage without storing content.

Compute · private
Private token factory or on-site edge appliance

Cost per token is part of the bill. Mixed hardware underneath; one meter on top.

See the gateway mask a prompt

Sample text only. In reversible mode the model sees placeholders and the answer comes back with the original values restored.

What the employee typed

Please check last month's statement for client Alex Chan (HKID A123456(7), account 012-345-67890, email alex.chan@example.com).

What the model receives

Please check last month's statement for client <PERSON_1> (HKID <HKID_1>, account <ACCOUNT_1>, email <EMAIL_1>).

Placeholders are swapped back to the real values in the reply the employee sees.

Your own agent
Masked once, at the gateway. Needs one key per agent (L1).
Trio client
Masked on the device first, then again at the gateway (L3).

The deeper you connect, the more you can govern

Every deployment starts with tokens and cost. Each level adds switches in the control tower; you pay for the switches you turn on.

L0Token
You connect by

One API key against our private compute.

You get

Token usage and cost, model allowlist, budgets and credit pools, credential filter.

L1Agent
You connect by

One key per agent, or an agent-ID header.

You get

Per-agent usage, PII masking at the gateway, moderation, audit log, department quotas.

L2Run
You connect by

Add session and turn IDs plus one completion callback.

You get

Agent-run billing and ROI dashboard (version 2.0).

L3Trio
You connect by

Run agents in Trio Local, Web or Task.

You get

Agent store and approvals, OS-native sandbox, on-device OCR and PII.

7 deployment profiles

Same control plane, different depths. Pick the layout closest to yours.

Profile 01
L3 · Trio

Enterprise HQ

A platform that resells AI services to its own members or customers.

Setup

Private token factory + ASN + Trio Local, Web and Task

Data stays

In the platform, with context kept per member

What ASN does here
  • Different guardrail profiles per audience
  • Third-party model calls recorded against each member
  • Agent store with approvals for every team
Next level: Already at full depth: every switch is available.
Open the control tower

Governance modules

Each module shows the integration level it needs.

PII masking
L1 / L3

Reversible pseudonyms or irreversible placeholders at the gateway; Trio clients also mask on the device.

Personal data reaches the model only as placeholders.

Credit pools (top-up packs)
L0

Organization and sub-tenant credit pools with hard stops, approved overage and one-click top-ups.

Spend stays inside the budget you set.

Model and content policy
L0 / L1

Model allowlist per tenant, credential filter, sensitive-word and content moderation.

One set of rules for every app and every model.

Audit without content
L1

Who called which model through which agent, recorded without prompts or files.

Answers the auditor without creating a new data store.

Agent-run billing and ROI
L2 · 2.0

Counts completed runs and accepted outputs; customer-set baselines turn them into hours and value.

Pay for work done, not tokens burned.

Sandbox and on-device controls
L3

OS-native sandbox for agent tools, on-device OCR and PII masking in Trio clients.

Sensitive files never leave the machine.

ROI you can audit 2.0

Tokens are not productivity. With version 2.0, ASN counts completed agent runs and whether their output was accepted. You set the manual baseline, so the result is your number, not ours.

Value = accepted runs × manual minutes ÷ 60 × hourly cost
Net = value − token cost − platform fee

Govern AI on your own compute

Start with tokens and cost. Turn on more when you are ready.