Keep your software yours.
Run applications and agents without handing over your implementation. Code, prompts, weights, and tools remain protected from the client environment.
Private client deployments, without the rebuild
Run your software on sensitive client data inside a sealed environment. Their data stays private. Your software stays proprietary. Every run leaves proof.
One secure boundary. Two parties protected.
The product
Your client wants control of their data. You need to protect the software you built. AgentLockbox creates the neutral execution layer between you.
Run applications and agents without handing over your implementation. Code, prompts, weights, and tools remain protected from the client environment.
Client records, credentials, and prompts are processed inside a confidential runtime. Only policy-approved outputs can leave.
Each run produces signed evidence of the workload, policy, and execution path—without retaining the sensitive content.
Select the model that fits your workload. AgentLockbox provisions it inside the same confidential environment as your software. Applications that do not use AI can run there too.
How it deploys
Point AgentLockbox at the Kubernetes manifest or Dockerfile for your software or agent. We provision a protected cluster in your cloud account and deploy the workload. Choose an open-source AI model when you need one - our SDK deploys it inside the clean room.
from agentlockbox import AgentLockbox, GoogleCloud, OpenSourceModel
client = AgentLockbox()
# The manifest points to your existing agent image
deployment = client.deploy_kubernetes(
name="client-production",
manifest="./k8s/claims-agent.yaml",
model=OpenSourceModel(repository="Qwen/Qwen3-8B"),
target=GoogleCloud(
project="client-prod",
region="us-central1",
), # Uses your configured cloud identity
)
print(deployment.url)
Choose the model; we deploy it with your software in the confidential cluster.
from agentlockbox import AgentLockbox, GoogleCloud
client = AgentLockbox()
# A regular service works too; no model is required
deployment = client.deploy_docker(
name="private-service",
dockerfile="./service/Dockerfile",
context="./service",
target=GoogleCloud(
project="client-prod",
region="us-central1",
),
)
print(deployment.url)
The SDK builds and deploys a standard containerized application.
# Add AgentLockbox to your existing Terraform stack
resource "agentlockbox_kubernetes_deployment" "claims" {
name = "client-production"
manifest_path = "./k8s/claims-agent.yaml"
model_repository = "Qwen/Qwen3-8B"
google_cloud = {
project = "client-prod"
region = "us-central1"
}
}
output "agent_url" {
value = agentlockbox_kubernetes_deployment.claims.url
}
A Terraform provider could manage the cluster, workload, and selected model as part of your infrastructure stack.
Security, made useful
AgentLockbox runs your software inside trusted execution environments (TEEs): hardware-backed environments that protect sensitive code and data during execution. AgentLockbox adds controls over what runs, what it can access, and what can leave.
Review your security requirementsSensitive code and data remain protected while your software is running.
Secrets and client data are released only to a verified workload and policy.
Models, APIs, destinations, and outputs are governed with default-deny rules.
Give security teams verifiable evidence without storing the private interaction.
The AgentLockbox execution environment adds less than 3% performance overhead.
Start with one real deployment
Bring your software and preferred cloud. We’ll set up the clean room and get your first private workload running.
Start your deployment