Zero data retention, without the cost.

Run agents and models inside your own network. No third party keeps your data.

Book an architecture session.

Takes a minute. Then pick a time that suits you.

container for the gateway, running next to your databases

prompts, documents or traces sent to a third party by default

Up to 80%

lower token cost with open models on Operator

Public AI services process prompts and documents outside your network, often in another jurisdiction.

Zero-retention terms are hard to get and harder to verify. Your own record-keeping rules still apply.

Dedicated capacity from frontier labs is priced for the largest buyers.

Models on-prem: Operator serves open models on your hardware or in your private cloud, with frontier fallback only if you allow it.
Agents on-prem: The Tilde gateway runs next to your databases. Agents dial out to it, and people reach them through the one entry point you control.
Secrets stay put: Credentials are encrypted and brokered, never in model context, with short-lived tokens.
Your records, your rules: Traces go to your self-hosted Langfuse under your retention settings. Audit data exports cleanly.

Research agentHealthy

Private

01
Design
Map the deployment to your network, identity provider and data rules with our engineers.
02
Deploy
Run the gateway, agents and Operator on Kubernetes, ECS or your own hardware.
03
Operate
Govern access, budgets and audit from one place, with updates you schedule.

What does “zero data retention” mean here?

No third party keeps your prompts, documents or traces. You still keep the records your regulators require, under your own retention policy.

Can we still use frontier models?

If you choose to. Operator can route the hardest requests to a frontier provider you approve, or keep everything on-prem.

Who runs it?

Your team, Tilde, or both. Our engineers help design, deploy and operate it inside your environment.