For Enterprise Review
For the review board

The shelf.

The assets an Architecture Review Board expects to find before recommending a new runtime — every one short, honest, and linkable.

Architecture overview

How the runtime is composed and where trust boundaries sit.

Open

Governance model

What Govern, Run, and Prove mean in practice.

Open

Pilot guide

30 minutes, one agent, one policy, one Receipt.

Open

Security & threat model

Controls that ship today, scope, and residual risk — written for the reviewer.

Open

Compliance mapping

Evidence primitives mapped to EU AI Act, SOC 2, HIPAA, NIST AI RMF, and ISO/IEC 42001.

Open

Security & privacy brief

Trust boundaries and data flow, condensed for a security review.

Open

Resilience & outage behavior

What keeps working when our control plane is down, what degrades, and what stops.

Open

Platform integration

Rollout and day-two operations.

Open

Identity, SSO & provisioning

SAML 2.0 SSO intake and SCIM 2.0 provisioning for Enterprise; invite-based membership on Team.

Open

Independent verification

Verify a Receipt with a portable Apache-2.0 verifier that runs without Aarmos.

Open

Without governance

The realistic difference — for the executive question.

Open

FAQ

The questions every ARB asks.

Open

Principles

The rules we hold ourselves to.

Open

Then: understand, then improve

Governance produces evidence; evidence produces understanding. Operations turns the signed decision stream into a flight recorder, trust posture, and counterfactual replay — so a change can be simulated against recorded history before it reaches production.

Explore Operations

Become an Enterprise design partner.

SAML SSO and SCIM provisioning ship today. Work directly with us on evidence routing, data residency, and compliance attestation for your organization. Design partners get private support, roadmap input, and preferred pricing.

Vendor-neutrality.

Aarmos is not tied to a hyperscaler, a model provider, or a framework. Receipts verify with a portable Apache-2.0 artifact that runs without Aarmos. Your evidence outlives your vendor relationship.

GovernCan this agent do this?RunWill this work with my stack?ProveCan I prove what happened?
One decision. Three checkpoints. Every time.