The Same Governance Engine, Running Inside Your VPC
Cloptima's private edge gateway enforces guardrails, budget decisions, and audit logging locally — it's self-sufficient by design, not a thin proxy back to a hosted SaaS path.
Govern access before spend happens
Some teams cannot send all AI traffic through a hosted SaaS path. They still need spend controls, attribution, and usage finalization for workloads running in private networks.
One policy layer across model usage
The private gateway runs the same policy engine as the cloud gateway locally in your VPC: guardrail evaluation, budget decisions, and audit logging all execute on-site from signed policy snapshots. Provider credentials stay locally encrypted, and enforcement keeps working even if connectivity back to Cloptima is briefly unavailable.
- Guardrails, policy decisions, and budget enforcement run locally
- Provider credentials stay locally encrypted — never uploaded in plaintext
- Full audit trail generated on-site, synced back for central reporting
- Local reservation ledger keeps enforcement running through connectivity gaps
Start with one app, then expand
Start with hosted gateway or telemetry, then evaluate private gateway deployment for regulated apps, high-volume workloads, or network-constrained environments.
Built for private production AI
The architecture uses signed policy snapshots, locally encrypted credentials, local budget decisions, resilient usage delivery, and central reporting so teams can combine private execution with centralized AI FinOps without uploading plaintext provider credentials to Cloptima cloud.
Cloud Gateway vs. Private Edge Gateway
The private gateway runs the same governance engine as the hosted gateway — the difference is where it executes.
| Capability | Cloud Gateway | Private Edge Gateway |
|---|---|---|
| Guardrail enforcement | Included | Runs locally in your VPC |
| Budget & policy decisions | Included | Runs locally in your VPC |
| Audit logging | Included | Generated locally, synced for reporting |
| Provider credentials | Managed by Cloptima | Stay locally encrypted in your environment |
| Exact response cache | Included | Included |
| Semantic response cache & search | Included | Coming soon |
| Deployment model | Hosted SaaS | Runs inside your VPC or on-prem |
Launch path
Private gateway deployment is available through enterprise onboarding. Cloptima reviews workload topology, provider connectivity, and governance requirements as part of rollout.
FAQ
Operationalize LLM FinOps Across Your Apps
Start with telemetry, gateway governance, or provider bill matching workflows. Keep model spend connected to engineering ownership and finance reporting.