Enterprise AI Control Plane · Singapore & ASEAN

See every AI your company uses. Govern all of it.

Copilot, ChatGPT, Claude, Gemini, Bedrock — usually bought by different teams, on separate bills, under separate policies, with no shared audit trail. Halorix puts all of it under one set of rules, and blocks what shouldn't leave.

Govern · Secure · Control cost — across every AI your company uses

How it works

Not “which model?” — “what data is this, and where is it allowed to go?”

Data classification
Policy
Routed to
PublicTIER 1
Halorix policy engine
OpenAI · Claude · GeminiAllow
InternalTIER 2
Azure OpenAI · AWS BedrockAllow
SensitiveTIER 3
SG / MY in-region modelsRedact + allow
RestrictedTIER 4
Private LLM — or refusedBlock

Set the rule once. Every prompt from every employee, on every model, follows it — and leaves a record your auditor can read.

Architecture

One layer, sitting between your people and every model you use.

Access Workspace Web · desktop
Shared prompts
Team knowledge
Identity Entra · Okta SSO · SAML
SCIM provisioning
Group → role
Core Classification
& policy engine
Tier detection
Redaction · block
Routing rules
Routing Model gateway Failover
Rate limits
Virtual keys
Providers Any model OpenAI · Anthropic
Google · Bedrock
Azure · private
Evidence Audit · cost Immutable log
Spend by team
Export to SIEM

Perimeter integrations → Netskope · Cloudflare · Palo Alto Prisma AIRS · Zscaler · Microsoft Purview
They stop the unsanctioned path at the network. Halorix governs the sanctioned one and returns the logs.

Scope

Copilot governs Microsoft's AI. Halorix governs all of it.

Under governanceMicrosoft CopilotHalorix
Microsoft 365 AIYesYes
ChatGPT · Claude · Gemini, used directlyYes
AWS Bedrock · Azure OpenAIPartialYes
Private and open-source modelsYes
Your own internal agentsPartialYes
How you're charged Flat platform licence · not per seat
Base
Platform licence
Governance, admin, policy, audit, cost dashboard. Flat monthly — independent of headcount.
Optional
Workspace seats
Only for staff who actually use the chat workspace. Priced below Copilot.
Variable
Model usage
Provider cost plus a thin margin, passed through at actual usage. No token resale markup.
Add-on
Compliance pack
Your sector's policy templates, kept current as the regulator moves.

Why it matters: per-seat pricing charges full freight for the majority of staff who open an AI tool twice a month. A flat licence puts the cost on the platform, where it belongs — and your bill stops tracking your headcount.

Capabilities

Six things your IT team stops doing by hand.

01 · Protection

Shadow AI protection

Restricted data is blocked before it reaches any provider, and the sanctioned path is fast enough that people stop routing around it.

  • PII and secrets redacted in flight
  • Per-model, per-team allow lists
  • Sanctioned-usage reporting back to your SSE
02 · Security

Enterprise security

Configurable zero-retention, provider by provider — so what you send isn't kept or used for training.

  • Entra / Okta SSO, SAML, SCIM
  • Prompt-injection guardrails both ways
  • Tamper-evident audit trail, SIEM export
  • Just-in-time deprovisioning
03 · Cost

AI cost governance

The first month-end where Finance can answer what AI actually cost, and which department spent it.

  • Budgets by department and by user
  • Chargeback and showback
  • Spend by model and by provider
  • Forecast and threshold alerts
04 · Speed

Live in days, not months

No AI platform team to hire, no six-month integration project, no consultant discovery phase.

  • Connect Entra → import users
  • Set policy → choose models
  • Set budgets → connect knowledge
  • Go live
05 · Knowledge

Your documents, governed

Retrieval over your own repositories, with the same permissions and the same classification rules applied.

  • SharePoint · Drive · file shares
  • Permission-aware retrieval
  • Answers cite their source
06 · Agents

Agents under the same rules

Internal agents and automations run through the same policy engine as your people — not around it.

  • Service accounts with scoped keys
  • Per-agent budget and rate limits
  • Same audit trail as human usage
Also included, obviously
Multi-LLM · SSO / SAML / SCIM · RBAC · Full audit log · DLP · Usage dashboard · Model policy · Failover · Rate limiting · Virtual keys
Compliance & deployment

Four rulebooks, not one checkbox.

Cross-border data rules in ASEAN aren't a setting. Halorix ships your sector's policy templates pre-built, and keeps them current as the regulator moves.

Compliance packs
Professional services
Legal · accounting · consulting
Client confidentiality, matter separation, PDPA
P1
Financial services
Licensed mid-market institutions
MAS TRM, outsourcing notice, audit evidence
P1
Healthcare
Providers and health-tech
PDPA, HSA expectations, in-region processing
P2
Logistics & supply chain
Regional headquarters
Multi-jurisdiction data transfer rules
P2
Where it runs
Halorix cloud, in region
Fastest path. Singapore or Malaysia region, nothing leaves ASEAN.
Data at rest → our region
Your cloud tenant
Deployed into your own AWS or Azure subscription, managed by us.
Data at rest → your account
Dedicated VPC
Isolated network, your keys. For licensed and regulated entities.
Data at rest → your VPC · BYOK
Private model, on-premises
Open-weight models inside your boundary, for the restricted tier.
Data at rest → never leaves
Fit

Enterprise-grade AI governance, without standing up an AI platform team.

Halorix is for you if
  • 200–800 people, Singapore or regional headquarters
  • Several AI tools already in use, bought by different teams
  • You have IT — but no dedicated AI or security platform team
  • PDPA, MAS or sector regulation applies to you
It isn't, if
  • Your priority is automating customer enquiries, not governing internal AI
  • One AI tool, one department, no compliance exposure

That's a different product — start with HaloraAI →

Start here

Start with an AI exposure snapshot.

Forty-five minutes with us, and a two-page picture of where your organisation actually stands today:

  1. Every AI tool in use — and which budget is paying for it
  2. Monthly AI spend, and how much of it is duplicated
  3. What data is going where, right now
  4. Gaps against PDPA and MAS expectations

Request your assessment

No software to install. No obligation. You keep the snapshot either way.

Blue Peak Digital Pte. Ltd. · Singapore
We reply within one business day.

Design partner programme. We're building Halorix with three founding customers in professional services and financial services. Preferential terms, direct input on the roadmap, named case study by agreement.

Talk to us →