Your AI platform. Your jurisdiction. Your keys.
Like Azure Stack, but for open frontier models: the same stack we run, deployed where you need it. Your servers, or a data centre in your country or region, for example Sri Lanka, the Gulf or Singapore.
Control, layer by layer.
Sovereignty depends on who controls the hardware, the keys, the logs and the updates, not on who wrote the model.
- Data residency. Prompts and outputs stay in the place you choose.
- Budgets. Limits by team, project or key, enforced, not just reported.
- Cost audit. Every call traceable to a person, a project and a price.
- Routing. Send each job to the right model, with fallbacks you control.
- Partner, not vendor. Forward-deployed engineers help you build the first use cases and train your team.
Open models, tested before they're trusted. Because the weights are open, you can inspect and test every model. Independent evaluations, including the US NIST CAISI review of DeepSeek, have found weaknesses such as jailbreak susceptibility. So before go-live we evaluate against your own standards, add guardrails, and route each task to the model that passes.
Who controls what
Sovereign| Hardware and location | You. Your servers, or a data centre in your country or chosen region. |
|---|---|
| Model weights | You hold a copy. Open-weight Qwen, DeepSeek, Kimi and more, from official sources, checked against published hashes, with licences listed per model. |
| Prompts and outputs | Stay inside your deployment. The platform doesn't call the model labs or the Meruva Gateway. |
| Encryption keys and identity | Yours, integrated with your directory. |
| Logs and audit | In your environment. Every call traceable to a user, a project and a cost. |
| Updates and new models | You approve them. Connected, or offline with updates delivered by a route you choose. |
| Meruva's access | None by default. Support access is granted by you, time-limited and logged. |
Discovery, design, deploy, run.
- Discovery. Your data rules, workloads and budget.
- Design. Hardware or in-region hosting, models and governance.
- Deploy. We install and test the stack in your environment.
- Run. Support, updates and new models, under an agreement you set.
What we can't claim yet.
Meruva doesn't yet hold ISO 27001, SOC 2 or Cyber Essentials certification, and isn't listed on G-Cloud. Our progress is on our Trust page. If your procurement needs one of these, tell us early and we'll be straight with you about timing.