Enterprise Edition · Self-hosted

Your orchestrator. Your agents. Your metal.

The seat license runs a fixed governed bench on dedicated infrastructure. Enterprise installs the NornGate control plane inside your own perimeter and lifts three ceilings: the agent roster, the container cap, and the tenancy boundary.

norngate / cluster · your-vpc
Agent fleet
ORCHESTRATOR · NORNGATE
142 pods active · autoscaling
TemporalK8s HPA
TENANCY · SOLE
BYO-KMS · Vault sealed
In-perimeter
AUDIT · CUSTOMER-HELD
7-yr store · chain intact
Verifiable
Bounded only by your clusterregion us-east
Agents & sub-agents
Containers (cluster-bounded)
1sole
Dedicated tenancy
7yr
Customer-held audit
01 — Why Enterprise

Three ceilings, lifted by design.

The seat license is deliberately bounded so it stays cheap, uniform, and auditable. Enterprise is for organizations whose workload has outgrown one of three specific limits.

Ceiling 01 — Bench
Arbitrary agent graph
Beyond a fixed C-suite — instantiate any number of domain agents and sub-agents, each with its own skill files and tool scope.
Ceiling 02 — Compute
Unbounded pods
Each agent invocation runs in its own pod on dedicated capacity, horizontally autoscaled — bounded only by your cluster.
Ceiling 03 — Tenancy
You own the perimeter
The control plane and audit store live inside your VPC or facility. Prompts, secrets, and records never transit operator infrastructure.
02 — Architecture

A control plane you install, not a console you log into.

Enterprise ships the same NornGate stack the operator runs, packaged for deployment into your environment. Every component is open-source or self-hostable; nothing in the data path is a black box.

Orchestration core

Defines the agent graph, routing, and the Governance Gate. Carries domain skill files; you extend it with your own.

MIT · in-house fork
Temporal

Durable workflows

Replayable execution. Every agent step and ratification gate is a workflow event — the source of the audit trail.

Apache-2.0
Kubernetes

Container substrate

One pod per agent invocation. HPA + KEDA make "unlimited containers" a real, cluster-bounded property.

EKS / GKE / on-prem
Qdrant

Vector memory

Per-agent retrieval and skill embeddings, self-hosted so the corpus stays inside your perimeter.

Apache-2.0
Vault

Secret isolation

Secrets leased per pod and sealed by your KMS. A compromised container cannot read another's credentials.

BYO-KMS
Langfuse

Observability

Trace, cost, and latency on every model call — required to supervise an unbounded fleet rather than guess.

MIT
Deployment topologies

Managed, BYO-cloud, or air-gapped.

Pick the perimeter your mandate requires. The orchestrator and audit store move with it; the operator retains support and upgrade access only by grant.

  • Managed-dedicated — sole-tenant cluster, fastest path
  • BYO-cloud — installed into your AWS, GCP, Azure, or DO account
  • On-prem / air-gapped — no outbound dependency in the data path
See engagement
TOPOLOGY OPTIONS
AManaged-Dedicated · sole-tenant, operator-run
BBYO-Cloud · your VPC, never transits operator
COn-Prem · air-gapped, in-perimeter model
03 — Governance at scale

More agents. Same gate.

Every agent you add inherits the Governance Gate, the Reg FD filter, and the audit obligation. Unlimited agents never mean unlimited authority.

01 — Human-in-the-loop

Material gate on every agent.

Each material action across the fleet queues for human ratification before execution. Agents recommend and draft; they do not bind the issuer.

§ Item 401, Reg S-K
02 — Customer-held audit

Tamper-evident, in your store.

Every decision and ratification is SHA-256 hash-chained and held in your perimeter, producible in a verifiable format on request.

§ 17 CFR 240.17a-4(b)(4)
03 — Keys & residency

BYO-KMS, RBAC, residency.

Secrets sealed by your KMS; role-based access across the fleet; data-residency pinned to your region. SOC 2 alignment supported.

Vault · sole tenancy
04 — Engagement

Licensed to the deployment, not the seat.

Enterprise is licensed annually and priced to the deployment — topology, agent fleet, and provisioned capacity. The $999/mo seat license remains right for a fixed bench on shared infrastructure.

Seat License
$999 /mo
Fixed seven-member bench · shared dedicated infrastructure · NornGate operated for you.
Enterprise Edition
Per deployment
Bespoke
Unlimited agents & containers · self-hosted NornGate · BYO-KMS · customer-held 7-yr audit · dedicated onboarding & SLA.

Take the next step.

Install NornGate in your perimeter, or walk the architecture with our team.