Design partner program

The GembaOS design partner program is a six-week pilot in which one of your real workflows runs under GembaOS on your own infrastructure, from a written boundary to a tiered release. The program takes five enterprise partners per quarter, with our architects working alongside your team. GembaOS is a zero-trust governance runtime for enterprise AI agents: policy-decided access, single-use clearance tokens bound to exact parameters, and accountable human approvals, running on-premises or in a private VPC.

Who is the program for?

GembaOS design partners are enterprises with one workflow where an agent could do useful work today, but a sensitive action in it needs someone’s approval.

Fit	What it looks like
A workflow with a real approval limit	Refunds above an amount, a production change, an account change, a case closure
Agents you already run, or plan to	LangGraph, Dify, a CRM vendor’s agent, or none yet
A named business owner	The person who signs in shadow mode and decides the release tiers
An IT or DevOps liaison	For the deployment, the directory export and the adapters
Infrastructure you control	A Linux server on-premises or in a private VPC

What happens in six weeks?

GembaOS is deployed in week one and every later week adds evidence, not scope.

Week	What is done	Who
1–2	Define the boundary: choose the workflow, connect your directory, write down the Delegation of Authority as policy	Your business owner, our architect
3–4	Connect and verify: integrate the target systems through adapters, run golden regression and the adversarial cases	Your IT liaison, our engineer
5	Observe in shadow mode: agents draft work, the owner reviews every proposed action, nothing executes	Your approvers
6	Release in tiers: the agreed low-risk actions execute under clearance, weekly audit evidence is reviewed	Your owner, us

What do we bring, and what do you bring?

We bring the runtime, the deployment, the adapters for your systems, the policy written from your authority table, the test cases, and an architect in every weekly review. You bring the workflow, the approval limits as they really are, the system access for the adapters, a directory export, and the people named above for the hours agreed when the pilot is scoped.

What do you have at the end?

GembaOS running on your infrastructure, with your authority table written down as policy.
Golden tests for the workflow, and the red-team cases replayed against it.
Audit evidence from shadow mode and from the first tiered release.
A plan for the next release tiers, and the list of gaps the Gap Register collected.

What are the terms?

The consultation is free. Pilot scope and fees are agreed individually; eligible partners can agree a 24-month production price lock. The pilot is not exclusive, the data stays yours, and no customer name, logo or figure is published without your written agreement.

How do we apply?

Use the contact form and choose “Design Partner application”. Tell us the workflow, the systems it touches and who would own it; we reply by email to set up the first conversation.

Related: security and deployment, the FAQ and the glossary.