Sovereign AI, priced like capacity you control — never metered by the token.
Iftah installs a complete governance and serving layer inside your environment — priced on the governance capacity you deploy, not the tokens you generate. A fixed 90-day pilot entry. A committed annual subscription when you move to production. No surprise cloud bills. No metering against workloads you control.
Read moreاقرأ المزيدShow lessعرض أقل
Iftah installs a complete governance and serving layer inside your environment — priced on the governance capacity you deploy, not the tokens you generate. A fixed 90-day pilot entry. A committed annual subscription when you move to production. No surprise cloud bills. No metering against workloads you control.
Iftah installs a complete governance and serving layer inside your environment — priced on the governance capacity you deploy, not the tokens you generate. A fixed 90-day pilot entry. A committed annual subscription when you move to production. No surprise cloud bills. No metering against workloads you control.
Capacity-based, not consumption-based — license governed capacity per year, never per token or request
No telemetry callback — the control plane carries health, version, and latency metrics only, never content
Four costs, named plainly — platform, deployment, operations, and your own infrastructure (not Iftah revenue)
Air-gap honest — offline license enforcement means pricing works with zero egress to meter against
Capacity-based, not consumption-based — license governed capacity per year, never per token or request
No telemetry callback — the control plane carries health, version, and latency metrics only, never content
View 2 more proof points
Four costs, named plainly — platform, deployment, operations, and your own infrastructure (not Iftah revenue)
Air-gap honest — offline license enforcement means pricing works with zero egress to meter against
12 weeks
first governed workload live
1
operating model for all teams
Zero
DIY platform build required
You own the compute. We operate the governance.
GPU, storage, and network are billed directly by your cloud or hardware provider — AWS, Azure, GCP, Oracle, or bare metal. Iftah charges zero margin on compute. Your procurement team sees every infrastructure line item in your own account.
How you pay
How Iftah is priced — four costs, fully separated.
We charge for the governance platform and its remote, audited operation — not for the silicon you already own, and not for tokens we cannot and will not see. Procurement can budget all four lines before the first technical call.
Annual · Iftah
Platform subscription
An annual, capacity-based license for the full single-tenant governed stack — all six products on one install. Sized by governed accelerator-node band or as a flat per-cluster site license; 3- and 5-year terms lower the effective rate. Enforced offline — no phone-home, no usage meter inside your perimeter.
View 3 more details
One-time · Iftah
Deployment & hardening
The fixed-fee 90-day pilot: we install into your cluster, integrate your identity provider via a client-local key mirror, tune guardrails for your domain identifiers, and drive the production cutover gate-set. Credited toward your production contract on cutover.
Annual · Iftah
Operations & support
An annual contract for remote, break-glass operation under a written RACI — signed GitOps releases, fleet patch and CVE management, and SLA-backed support. Standard support is included; 24/7 mission-critical response and a named lead are priced as upgrades.
Paid to your provider
Your GPUs & infrastructure
You pay your cloud provider or hardware vendor directly for compute, storage, and accelerators — in your account, in your region. We never resell, mark up, or meter it. Stated plainly so total cost of ownership is honest from day one.
How Iftah is priced — four costs, fully separated.
We charge for the governance platform and its remote, audited operation — not for the silicon you already own, and not for tokens we cannot and will not see. Procurement can budget all four lines before the first technical call.
Read moreاقرأ المزيدShow lessعرض أقل
We charge for the governance platform and its remote, audited operation — not for the silicon you already own, and not for tokens we cannot and will not see. Procurement can budget all four lines before the first technical call.
We charge for the governance platform and its remote, audited operation — not for the silicon you already own, and not for tokens we cannot and will not see. Procurement can budget all four lines before the first technical call.
01
Annual · Iftah
Platform subscription
An annual, capacity-based license for the full single-tenant governed stack — all six products on one install. Sized by governed accelerator-node band or as a flat per-cluster site license; 3- and 5-year terms lower the effective rate. Enforced offline — no phone-home, no usage meter inside your perimeter.
02
One-time · Iftah
Deployment & hardening
The fixed-fee 90-day pilot: we install into your cluster, integrate your identity provider via a client-local key mirror, tune guardrails for your domain identifiers, and drive the production cutover gate-set. Credited toward your production contract on cutover.
03
Annual · Iftah
Operations & support
An annual contract for remote, break-glass operation under a written RACI — signed GitOps releases, fleet patch and CVE management, and SLA-backed support. Standard support is included; 24/7 mission-critical response and a named lead are priced as upgrades.
04
Paid to your provider
Your GPUs & infrastructure
You pay your cloud provider or hardware vendor directly for compute, storage, and accelerators — in your account, in your region. We never resell, mark up, or meter it. Stated plainly so total cost of ownership is honest from day one.
Engagement tiers
From a fixed-fee pilot to fully sovereign production.
One spine: prove it, run it, then sovereign-harden it. Every tier ships the full governance floor — deployment mode and operations depth are priced on top, never the entry.
Pilot
Prove governed AI on your own infrastructure — before committing budget.
How it's billed
Fixed-fee · 90 days
One number, no usage variability — credited toward production on cutover. Design Partners receive reduced founding-customer pricing.
Right for you if
You need to prove private AI works in your environment before committing to production.
Included features (6)+
Single-tenant install into your cluster and region — synthetic / non-PHI traffic during the pilot
Federated SSO via a client-local key mirror; default-deny authorization on every call
Self-hosted guardrails (Presidio PII/PHI, NeMo injection/jailbreak), tuned for your domain identifiers
Drives the production cutover gate-set with signed evidence
Bring your own open models, including leading open models — no per-model fee
Fixed scope, fixed price — a de-risking entry point, not a feature-starved trial
Single-tenant install into your cluster and region — synthetic / non-PHI traffic during the pilot
Federated SSO via a client-local key mirror; default-deny authorization on every call
Self-hosted guardrails (Presidio PII/PHI, NeMo injection/jailbreak), tuned for your domain identifiers
Drives the production cutover gate-set with signed evidence
Bring your own open models, including leading open models — no per-model fee
Fixed scope, fixed price — a de-risking entry point, not a feature-starved trial
From a fixed-fee pilot to fully sovereign production.
One spine: prove it, run it, then sovereign-harden it. Every tier ships the full governance floor — deployment mode and operations depth are priced on top, never the entry.
Read moreاقرأ المزيدShow lessعرض أقل
One spine: prove it, run it, then sovereign-harden it. Every tier ships the full governance floor — deployment mode and operations depth are priced on top, never the entry.
One spine: prove it, run it, then sovereign-harden it. Every tier ships the full governance floor — deployment mode and operations depth are priced on top, never the entry.
Pilot
Prove governed AI on your own infrastructure — before committing budget.
How it's billed
Fixed-fee · 90 days
One number, no usage variability — credited toward production on cutover. Design Partners receive reduced founding-customer pricing.
Right for you if
You need to prove private AI works in your environment before committing to production.
Included features (6)+
Single-tenant install into your cluster and region — synthetic / non-PHI traffic during the pilot
Federated SSO via a client-local key mirror; default-deny authorization on every call
Self-hosted guardrails (Presidio PII/PHI, NeMo injection/jailbreak), tuned for your domain identifiers
Drives the production cutover gate-set with signed evidence
Bring your own open models, including leading open models — no per-model fee
Fixed scope, fixed price — a de-risking entry point, not a feature-starved trial
Single-tenant install into your cluster and region — synthetic / non-PHI traffic during the pilot
Federated SSO via a client-local key mirror; default-deny authorization on every call
Self-hosted guardrails (Presidio PII/PHI, NeMo injection/jailbreak), tuned for your domain identifiers
Drives the production cutover gate-set with signed evidence
Bring your own open models, including leading open models — no per-model fee
Fixed scope, fixed price — a de-risking entry point, not a feature-starved trial
The cost of not governing AI in a regulated environment.
Exceeds budget
Organisations retrofitting AI for compliance after deployment face costs exceeding the original deployment budget.
3–6 months
A the OCC or HIPAA regulatory finding related to an AI system typically requires 3–6 months of remediation work.
$5M
A single data-sovereignty incident can trigger fines up to $5 million (HIPAA) or $5 million (the US HIPAA) — plus supervisory intervention and potential mandate withdrawal.
Iftah’s pilot is priced to let you validate sovereign AI before your regulator does. The alternative is more expensive.
What drives price
Four drivers. No surprises.
Pricing tracks the governance value you deploy and the depth at which we operate it — not your token usage.
Governed capacity in your cluster
Priced by accelerator-node band — or a flat per-cluster site license — not per physical GPU, so dense, partitioned, or idle hardware is never punitively taxed. You scale capacity you control; the license tracks governance value, not silicon.
View 3 more details
Deployment mode
Cloud VPC and private / regional sovereign cloud sit at the base; on-prem and fully air-gapped carry a sovereignty premium for the heavier assurance, offline enforcement, and operations they demand.
Term length
Annual is the floor; 3- and 5-year committed terms lower the effective rate, rewarding the budget-stable horizon sovereign and government buyers prefer. Committed-capacity bands lower it further.
Operations & support depth
Standard support is included in the subscription. Business-critical 24/7 response, a named operations lead, and accelerated per-data-class RPO/RTO are premium upgrades — never baked into the entry price.
Four drivers. No surprises.
Pricing tracks the governance value you deploy and the depth at which we operate it — not your token usage.
Read moreاقرأ المزيدShow lessعرض أقل
Pricing tracks the governance value you deploy and the depth at which we operate it — not your token usage.
Pricing tracks the governance value you deploy and the depth at which we operate it — not your token usage.
Governed capacity in your cluster
Priced by accelerator-node band — or a flat per-cluster site license — not per physical GPU, so dense, partitioned, or idle hardware is never punitively taxed. You scale capacity you control; the license tracks governance value, not silicon.
Deployment mode
Cloud VPC and private / regional sovereign cloud sit at the base; on-prem and fully air-gapped carry a sovereignty premium for the heavier assurance, offline enforcement, and operations they demand.
Term length
Annual is the floor; 3- and 5-year committed terms lower the effective rate, rewarding the budget-stable horizon sovereign and government buyers prefer. Committed-capacity bands lower it further.
Operations & support depth
Standard support is included in the subscription. Business-critical 24/7 response, a named operations lead, and accelerated per-data-class RPO/RTO are premium upgrades — never baked into the entry price.
Included in every tier
The sovereignty floor is never an upgrade.
Every install — pilot to sovereign — ships the same governance controls. These are standard, not paywalled. Security, architecture, and procurement materials are available during enterprise evaluation.
Identity & policy on every call
Federated SSO and service-account identity via a client-local key mirror — no per-request egress to your IdP — with policy-as-code making a default-deny, fail-closed authorization decision on every request.
View 3 more details
Self-hosted guardrails
Presidio PII/PHI detection and NeMo injection/jailbreak rails run in-region as local pods — never a SaaS guardrail API — tuned for your domain identifiers. PHI handling is fail-closed by default.
Immutable in-region WORM audit
Every governance decision and outcome is written to a tamper-evident, append-only, in-region store with a partitioned hash-chain. If the audit sink is unavailable the platform fails closed to a durable buffer — never a silent gap.
Break-glass operation, never standing access
Iftah operates your install under a time-bound, client-approved, fully audited break-glass key governed by a written RACI. We hold no standing access to your prompts, responses, or pods; all changes flow as signed GitOps artifacts.
The sovereignty floor is never an upgrade.
Every install — pilot to sovereign — ships the same governance controls. These are standard, not paywalled. Security, architecture, and procurement materials are available during enterprise evaluation.
Read moreاقرأ المزيدShow lessعرض أقل
Every install — pilot to sovereign — ships the same governance controls. These are standard, not paywalled. Security, architecture, and procurement materials are available during enterprise evaluation.
Every install — pilot to sovereign — ships the same governance controls. These are standard, not paywalled. Security, architecture, and procurement materials are available during enterprise evaluation.
Identity & policy on every call
Federated SSO and service-account identity via a client-local key mirror — no per-request egress to your IdP — with policy-as-code making a default-deny, fail-closed authorization decision on every request.
Self-hosted guardrails
Presidio PII/PHI detection and NeMo injection/jailbreak rails run in-region as local pods — never a SaaS guardrail API — tuned for your domain identifiers. PHI handling is fail-closed by default.
Immutable in-region WORM audit
Every governance decision and outcome is written to a tamper-evident, append-only, in-region store with a partitioned hash-chain. If the audit sink is unavailable the platform fails closed to a durable buffer — never a silent gap.
Break-glass operation, never standing access
Iftah operates your install under a time-bound, client-approved, fully audited break-glass key governed by a written RACI. We hold no standing access to your prompts, responses, or pods; all changes flow as signed GitOps artifacts.
Procurement FAQ
Answers for your procurement and security teams.
The questions regulated buyers ask first.
Because a per-token meter would have to count usage inside your sovereign boundary and export it — the exact data movement the platform exists to prevent. Our architecture forbids telemetry callbacks, enforces default-deny egress that carries no content, and runs fully air-gapped where there is no egress to meter against. So we price capacity you control, not usage we cannot see — and you get a predictable, budgetable annual number with no usage surprises.
We publish the structure openly — the unit (governed accelerator-node band or per-cluster site license), the four cost lines, the price drivers, and the term-discount mechanics. We don't publish a fixed public dollar table, because each single-tenant install is configured per client and we won't quote a number we'd have to walk back. As soon as you qualify, we provide indicative budgetary bands so your budget cycle can proceed.
Iftah revenue is three lines: the platform subscription, the one-time deployment and hardening, and the operations and support contract. Your GPUs, compute, storage, and cloud or hardware are not Iftah revenue — you pay your provider directly, in your own account and region. We never resell, mark up, or meter your infrastructure, so your total cost of ownership is honest from day one.
We operate your install remotely but hold no standing access to your prompts, responses, or pods. Any access is break-glass: pre-defined, client-approved, time-boxed, and logged in your own audit trail under a written RACI. All configuration and releases flow as signed GitOps artifacts — even Iftah cannot hand-edit a running install outside that path. The control plane sees health, version, and latency metrics only, never content.
Yes. Licensing enforces offline, updates arrive as signed offline bundles, your identity provider's public keys are mirrored locally so there is no per-request egress, and the WORM audit and secrets run on a portable in-region substrate. Air-gapped is the top assurance tier, priced with a sovereignty premium for the heavier operations it demands — not an afterthought.
No. Iftah produces evidence for your review — immutable audit trails, signed provenance, policy decisions, and guardrail baselines — but compliance is the data controller's obligation. We give your auditors and your regulator (the OCC, NIST, or your health authority) defensible, tamper-evident evidence; we do not and cannot certify compliance on your behalf.
Yes. We invoice in USD, USD, or USD. Local currency contracts are standard for US and the US enterprise and government procurement.
Yes. We work with government entities and sovereign funds on a dedicated pricing track. Fully air-gapped and classified deployments have separate scoping. Contact us for a government-sector quote.
Answers for your procurement and security teams.
The questions regulated buyers ask first.
Read moreاقرأ المزيدShow lessعرض أقل
The questions regulated buyers ask first.
The questions regulated buyers ask first.
Because a per-token meter would have to count usage inside your sovereign boundary and export it — the exact data movement the platform exists to prevent. Our architecture forbids telemetry callbacks, enforces default-deny egress that carries no content, and runs fully air-gapped where there is no egress to meter against. So we price capacity you control, not usage we cannot see — and you get a predictable, budgetable annual number with no usage surprises.
We publish the structure openly — the unit (governed accelerator-node band or per-cluster site license), the four cost lines, the price drivers, and the term-discount mechanics. We don't publish a fixed public dollar table, because each single-tenant install is configured per client and we won't quote a number we'd have to walk back. As soon as you qualify, we provide indicative budgetary bands so your budget cycle can proceed.
Iftah revenue is three lines: the platform subscription, the one-time deployment and hardening, and the operations and support contract. Your GPUs, compute, storage, and cloud or hardware are not Iftah revenue — you pay your provider directly, in your own account and region. We never resell, mark up, or meter your infrastructure, so your total cost of ownership is honest from day one.
We operate your install remotely but hold no standing access to your prompts, responses, or pods. Any access is break-glass: pre-defined, client-approved, time-boxed, and logged in your own audit trail under a written RACI. All configuration and releases flow as signed GitOps artifacts — even Iftah cannot hand-edit a running install outside that path. The control plane sees health, version, and latency metrics only, never content.
Yes. Licensing enforces offline, updates arrive as signed offline bundles, your identity provider's public keys are mirrored locally so there is no per-request egress, and the WORM audit and secrets run on a portable in-region substrate. Air-gapped is the top assurance tier, priced with a sovereignty premium for the heavier operations it demands — not an afterthought.
No. Iftah produces evidence for your review — immutable audit trails, signed provenance, policy decisions, and guardrail baselines — but compliance is the data controller's obligation. We give your auditors and your regulator (the OCC, NIST, or your health authority) defensible, tamper-evident evidence; we do not and cannot certify compliance on your behalf.
Yes. We invoice in USD, USD, or USD. Local currency contracts are standard for US and the US enterprise and government procurement.
Yes. We work with government entities and sovereign funds on a dedicated pricing track. Fully air-gapped and classified deployments have separate scoping. Contact us for a government-sector quote.
Next step
Review Iftah AI against your environment before choosing the first workload.