Everything Open. Nothing Exposed.
Veldris builds Midgard, the sovereign AI and data operating environment for organisations where control of data, models, keys and infrastructure, and the ability to operate disconnected, are requirements, not features. The kind of power our competitors sell in a black box, we publish as source.
The anti-black-box
Our competitors sell power as mystique: closed systems, cleared personnel, trust us. Veldris counter-positions on every axis. Open source instead of closed. Self-hosted instead of vendor-locked. Post-quantum encryption by default instead of compliance-later. Local inference instead of someone else's cloud. Where they say trust us, we say read the source. And where a foreign power's law can reach data held with a US provider wherever it sits, under the CLOUD Act and FISA 702, the only durable answer is an enclosure where the keys never leave you.
Every claim carries its provenance. Algorithms are named, standards are cited, audit lineage is visible. If the interface can't show how it knows, it doesn't say it.
No core function requires an outbound call. The enclosure runs air-gapped; your keys never leave. Sovereignty is architecture, not a contract clause.
Norse names give the system a memorable shape; the specification does the talking. One mythic clause, then hard numbers, never the reverse.
What you can do before the architecture matters
Ask questions of internal documents and datasets without any of it leaving your building or your cloud.
Run approved models locally or fully offline, keeping control of the model, the keys and the hardware.
Bring sensitive datasets together with permissions, provenance and an auditable decision trail intact.
Deploy, update and govern the environment without depending on a third-party cloud platform.
Where control is an operating requirement
For most organisations, cloud AI is a convenience. For some, it is not an option: the data cannot leave, the keys cannot be held by a third party, and the system must keep working when the network is cut.
Classified and operational data; disconnected and contested environments.
Patient data under strict national control; outcomes that must be auditable.
Ministries that need capability they can inspect, deploy and own.
Energy, telecoms and finance under sovereignty and resilience rules.
One enclosure. Six products.
Midgard Core is the enclosure, the defended trust boundary providing identity, the object fabric, storage, compute, governance and post-quantum cryptography. Six products stand on it, seven layers in all, each independently useful, compounding together.
Midgard Core
The enclosure itself.
vs Foundry coreForge
Data operations. Declared, versioned, replayable.
vs FoundryBifrost
Continuous delivery. Signed end to end.
vs ApolloMimir
Local agentic AI. Your hardware, your keys.
vs AIPHeimdall
Operational fusion. Every object traces back.
vs Maven · GothamGungnir
Decision projection. See where it lands first.
replaces offline modellingForseti
Assurance. Evidence an accreditor can check.
replaces vendor attestationYou own everything end to end, and can check it
Every core function runs inside your enclosure, from a single node to a cluster. The platform operates fully air-gapped.
Check: zero outbound calls, confirmed by your own network capture.Objects are sealed with AES-256-GCM under ML-KEM-wrapped keys (NIST FIPS 203). Keys are generated, held and rotated by you.
Check: FIPS 203 and the key-lifecycle specification.Approved open-weight, customer-owned or fine-tuned models, pinned by hash. Nothing phones home.
Check: benchmarks state model, hardware, context and latency.The core is open source under an OSI licence. Builds are reproducible, with a signed SBOM per release.
Check: the public repository, reproducible builds, signed SBOMs.Built to outlive us
Veldris plans in centuries, not quarters. The core is open source, builds are reproducible, and the cryptography assumes the computers of the 2040s, not the 1990s.
A forever company doesn't ask for trust. It makes itself replaceable, everything built to be inspected, forked, and continued by others, and earns permanence by being worth keeping.
Read the source, or talk to us.