The frontier operating platform for agentic AI and token optimisation.
Regulated organisations are moving agentic AI into production, but most lack control at the point of execution: policy enforcement on every agent call, real-time token cost control, architecture-aware compliance and sovereign control of inference and evidence.
When an incident happens, the evidence collection is scattered across provider logs, applications, approvals, security tools and cloud platforms.
The Grace Blackwell Platform closes this gap with HEX 165, delivered to users through applications such as TOPAS for Word. HEX 165 governs each AI request: enforcing policy, assessing compliance, controlling token flow, optimising cost and recording every material decision to a hash-chained audit log. Runtime security monitoring through the STPM Engine and air-gapped hosting through the Sovereign Edge IDN are both in progress.
The result is production AI that regulated enterprises can control, measure, evidence and trust.
HEX 165 governs AI requests in your own UK cloud subscription or in a dedicated Grace Blackwell environment in a UK data centre. TOPAS for Word is the application your people use.
The Sovereign Edge IDN is our planned air-gapped hosting environment for the most sensitive workloads. It is not available yet.
A planned sovereign hosting environment with the Inference Distribution Network (IDN) at its core. Five platform layers are designed to operate inside an approved UK / EU region, from sovereign connected environments to fully air-gapped operation for the most sensitive workloads.
The design keeps data, models, prompts, logs, telemetry and encryption keys in region. In air-gap mode, inbound and outbound connectivity is disabled, with ingress and egress controlled through approved transfer procedures.
Explore the Sovereign Edge IDNThe governance platform behind TOPAS for Word. Four engines cover policy, compliance, token cost and runtime security, which is in progress. Every AI request is checked against policy, sent only to an approved model and priced, with a hash-chained audit log generated by design.
HEX 165 moves AI governance below the application layer and into the execution path itself. It controls what agents are allowed to do, what context reaches the model, how tokens are routed and optimised, when human approval is required, and what evidence is retained for audit, compliance and operational review.
Explore HEX 165UK / EU territory. Sovereign control of people, process and infrastructure.
LPU inference compute. No inbound or outbound network connectivity.
Sub-10 ms intra-cluster fabric for compute and storage traffic.
WORM storage for audit logs, evidence and cryptographic keys.
Controlled physical ingress / egress via tamper-evident encrypted media.
Cleared personnel. Two-person rule. Full operational assurance.
| Sovereign Edge IDN (in progress) | HEX 165 engines | Open standards |
|---|---|---|
| Physical sovereign Point of Presence | Governance: policy engine, access, versions, TokenOps, audit, HITL | OPA and Rego (policy as code) |
| Air-gapped compute (High Performance Compute) | Compliance: 16 frameworks, 648 criteria across the four core frameworks, 15 agentic risk flags | OpenTelemetry and OTLP (telemetry) |
| 200 GbE RoCE fabric, NVMe-oF storage | STPM (in progress): eBPF telemetry, privacy gateway, autonomous detection | OCSF (security event schema) |
| Write-once secure vault for audit storage, UK / EU-controlled HSM keys | TOPAS: redaction, approved-model routing, cost telemetry, payload compression, workload ROI | Sigma (detection rules) |
| Sneakernet kiosk under two-person control | Cross-engine audit log integration | SPIFFE and SPIRE (workload identity) |
SC clearance, sovereign data handling, NCSC alignment, CDDO compliance. AI workloads with citizen impact need defensible governance and audit.
Governed AI for document work in policing, the NCA and criminal justice through TOPAS for Word, with NPPV3 cleared personnel. Sensitive details are redacted before AI processing and every decision is recorded.
Special-category clinical data under GDPR and DPIA requirements. The audit log supports CQC, ICO and clinical governance reviews.
FCA, PRA and DORA obligations. Real-time AI cost visibility for FinOps and CFO reporting. Audit evidence for SS1/23 model risk management.
| Option | Where it runs | Typical buyer |
|---|---|---|
| You host | Your own cloud subscription in a UK region, run by your team with Grace Blackwell support | Organisations that want everything in-house |
| We host | A dedicated environment in a UK data centre, under UK law, run by Grace Blackwell | A fast start, or limited cloud capacity |
| Full air-gap In progress | Sovereign Edge IDN, UK / EU-controlled physical PoP | Defence-adjacent, intelligence, classified caseloads |