Banking & capital markets
Compliance evidence at trade speed
Pre-trade MiFID II checks and DORA evidence on demand, inside your perimeter.
AIA · Agentic Intelligence Architecture
AI agents for
regulated industries
Open-source AI agent infrastructure for regulated enterprises.
Financial services
Healthcare & life sciences
Government & defence
Manufacturing & supply chain
The problem
Frontier AI ships your records to a vendor's cloud — someone else's servers, someone else's jurisdiction.
And the logs meant to show what an agent did are mutable operator data — not evidence an auditor can rely on.
With AIA, data stays in your perimeter — and your auditor can verify what the agents did.
Industries
Built for regulated industries
Healthcare & life sciences
Analytics without PHI egress
Federated cohort analytics with zero PHI egress, 21 CFR Part 11 end to end.
Government & defence
Classified work, on your terms
Classified synthesis on air-gapped hardware, sources and methods protected.
Manufacturing & supply chain
Provenance across the supply chain
Supplier due diligence and digital product passports — LkSG, CSDDD, CSRD — with provenance that holds up in audit.
Regulations
Aligned to the frameworks
Aligned to the frameworks
that govern your industry
DORA
Digital Operational Resilience Act · live since Jan 2025
EU · Financial services
EU AI Act
High-risk obligations · Art. 12 logging · 2 Dec 2027
EU · Cross-sector
NSM-10
Federal post-quantum migration
US · Federal
BSI TR-02102
PQC migration guidance
Germany · Cross-sector
Architecture
Four pillars
Four layers: the agent runtime, its memory, the proof of what it did, and post-quantum cryptography underneath.
Pillar 01
Multi-agent orchestration
Specialised agents across security, finance, development, and knowledge — each task routed to the best-fit agent.
Pillar 02
Knowledge graph
A Neo4j-backed graph where answers trace to the exact nodes behind them.
Pillar 03
Audit layer
Actions are signed into a tamper-evident log, designed to anchor a single proof on-chain — your auditor verifies it without the data.
Pillar 04
Post-quantum A2A
A forward-secret, post-quantum agent channel with ML-KEM-1024 — built in, not bolted onto TLS.
How AIA works
Run the agents
Run the agents
where your data already lives
Agents read, reason, and work inside your perimeter; all that leaves is a zero-knowledge proof.
Five stages inside the perimeter. One proof leaves.
The AI audit layer
One audit layer.
One audit layer.
Three kinds of proof.
The audit trail that gets your AI agents approved. AIA writes three kinds of proof; each shows that something is true and nothing else.
Architecture
| Proof | What it proves | Aligned to |
|---|---|---|
| Action attestation | An agent did a specific action, unaltered, at a known time. Signed into a hash-chained log whose root is designed to anchor on-chain, so an auditor confirms it offline — without the data behind it. | EU AI Act Art. 12 · DORA · NIS2 · HIPAA audit trail |
| Confidential transfer | Value moved between parties, amounts and counterparties private. Settled in regulated stablecoins, disclosed only to a party you choose. | MiCA · regulated stablecoins · selective disclosure |
| Verifiable inference | An output came from an approved model under an approved policy. Hardware attestation for self-hosted models; an attested call envelope for frontier APIs. | EU AI Act high-risk obligations |
Deployment
From managed cloud
From managed cloud
to air-gapped on-premise
Run it in our EU regions, in your VPC, or fully air-gapped. Three patterns, one codebase — identical APIs and proofs across all three.
We operate it
013a runs the cluster; you hold the keys.
Inside your cloud
Runtime, graph, and keys inside your VPC; only proofs cross the boundary.
Air-gapped
Full on-premise install with no outbound connectivity, for classified workloads.
Who builds it
Built in Berlin by 013a
Deep expertise in cryptography, multi-agent systems, and enterprise security — from the EU, for the regulated world.
Made in Germany
Start
Two paths in one conversation
A thirty-minute call to map your workload to the right deployment, agents, and audit evidence. No deck.