Overview
GenM - Enterprise AI Analytics and Orchestration Platform
GenM transforms how organizations interact with their data by replacing complex SQL queries and manual reporting with conversational AI. Business users, analysts, and decision-makers can ask questions in plain English and receive accurate, sourced answers drawn from databases, data warehouses, documents, and files, with all data remaining securely within your own AWS environment.
Multi-Agent Orchestration GenM runs 10+ specialized AI agents in parallel: a RAG agent for document Q&A, a Data Lake agent for structured file analysis (Excel, CSV), a Timbr-powered SQL agent for enterprise data warehouses, a Web Search agent, a Doc/PDF agent, and an LLM Judge agent for automated quality evaluation. A Master agent and intelligent Router agent coordinate these in real time, merging results into unified, coherent responses. Administrators can also create custom user-defined agents with dedicated knowledge bases and tool bindings.
Enterprise-Ready AWS Integration GenM is built natively for AWS. It deploys via Terraform to Amazon ECS or EKS (Helm charts included), uses Amazon RDS Aurora (PostgreSQL + pgvector) for structured data and vector search, AWS S3 for document storage, AWS SQS for async worker queues, and AWS Bedrock for multi-model LLM access (Anthropic Claude, Meta Llama, Mistral, and more). ALB with OIDC authentication actions is supported out of the box.
Broad Data Source Connectivity Connect to 20+ enterprise data sources including Snowflake, BigQuery, AWS Athena, Redshift, Databricks SQL, PostgreSQL, MySQL, SQL Server, Oracle, and MongoDB via the Timbr semantic layer for governed, business-friendly SQL generation. Native file support covers multi-sheet Excel workbooks, PDFs, and CSV files.
Flexible LLM Provider Support GenM works with OpenAI (GPT-4, o-series), Azure OpenAI, AWS Bedrock, Anthropic Claude, and any OpenAI-compatible endpoint (Ollama, vLLM, LM Studio). Models are configurable via the admin dashboard with no redeployment required to add or switch providers.
Enterprise Security and Identity Supports JWT/OIDC with Microsoft Entra ID, Okta, Auth0, and Keycloak. Role-based access control (Admin, Editor, Viewer), space-scoped data isolation for multi-tenancy, domain-level access policies, API key management, and full audit logging for compliance requirements.
Observability and Quality Assurance GenM includes full OpenTelemetry support with integration to standard OTel-compatible backends including Prometheus, Grafana, CloudWatch, and Jaeger for distributed tracing. A built-in LLM Judge system evaluates response quality automatically, and a user feedback loop enables continuous improvement over time.
Extensible Without Redeployment Model Context Protocol (MCP) support allows GenM to act as an MCP server for tools like Cursor and Claude Desktop. REST API tool bindings, Git-synced instruction management, and custom agent creation mean new capabilities can be added without touching the codebase.
Ideal For: Enterprises with complex, multi-source data environments; financial institutions requiring audit logging and strict data governance; organizations standardizing on AWS (Bedrock, RDS, SQS, S3); and teams looking to move from manual BI reporting to AI-powered self-service analytics.
Highlights
- Multi-LLM orchestration with dynamic model routing to optimize cost, performance, and security
- Unified access to structured and unstructured enterprise data through RAG and Text-to-SQL
- Enterprise-grade governance including RBAC, audit logs, budget control, and secure data ownership
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/12 months |
|---|---|---|
Basic Package | Basic tier subscription. Pricing defined via private offer. | $75,000.00 |
Premium Package | Premium tier subscription with advanced features. Pricing defined via private offer. | $150,000.00 |
Vendor refund policy
All fees are non-refundable unless otherwise specified in a separate written agreement. For purchases made via AWS Marketplace Private Offers, any refund terms will be governed by the applicable private offer agreement between the buyer and seller.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Terraform Deployment for Amazon ECS
- Amazon ECS
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
Initial Release of GenM v1.0.0
Full support for automated deployment via Terraform.
Optimized for Amazon ECS (Elastic Container Service).
Includes pre-configured Task Definitions and security groups.
Passed all technical and security assessments for AWS Marketplace.
Additional details
Usage instructions
OVERVIEW GenM ships as pre-built containers on AWS Marketplace (version genm1.0.0). Subscribe, request Terraform access, deploy in your AWS account. Do not build images from source; use URIs/tags from this product version page (repo: tectu/genm-mp; tags: , frontend-, worker-).
REQUIRED: Marketplace subscription; Microsoft Entra ID (2 apps for SSO); Amazon Bedrock (bedrock_region in tfvars); Route 53 zone for app. and api.; internet for deploy. No ongoing Tectu-hosted runtime required.
PREREQUISITES: Terraform >=1.5, AWS CLI v2; IAM for VPC, ALB, ECS Fargate, Aurora, S3, SQS, Secrets Manager, CloudWatch, Route 53, Bedrock; Entra tenant admin; Route 53 hosted zone; EC2 key pair (bastion/DB scripts). Docker only if replicating images across Regions (pull/tag/push, not build).
SUBSCRIBE: Accept EULA on AWS Marketplace. Copy backend/frontend/worker image URIs from version genm1.0.0 container details. Verify subscription under Manage subscriptions.
TERRAFORM REPO: Email support-genm@tectu.io (Subject: Access Request - GenM Terraform Repository) with AWS Account ID, company, GitHub username. Clone repo; use aws-dev-marketplace/.
IMAGES: Same Region as Marketplace registry: set backend_image_uri, frontend_image_uri, worker_image_uri in terraform.tfvars to Marketplace URIs. Different Region: docker login Marketplace registry, pull entitled images, push to your ECR in aws_region, use those URIs. See repo DEPLOYMENT-STEPS.md for replicate commands.
BOOTSTRAP STATE: Run repo bootstrap script (S3 + DynamoDB lock per main.tf).
ENTRA (before apply): Backend app: client secret, API scopes user/admin, ID URI api://, pre-auth frontend. Frontend SPA: https://app./ ; Web callback: https://app./api/auth/callback/azure-ad ; API perms user+admin. Set entra_tenant_id, backend_entra_client_id, frontend_entra_client_id in tfvars.
TFVARS: Copy terraform.tfvars.example. Set aws_region, bedrock_region, project_name, environment, domain_name, route53_zone_id, allowed_ips/vpn_ips, ec2_key_name, image URIs, Entra IDs. Do not commit tfvars.
DEPLOY: cd aws-dev-marketplace; terraform init, plan, apply (VPC, ALB, ECS, Aurora, S3, SQS, Secrets placeholders, IAM, logs, DNS).
SECRETS: aws secretsmanager put-secret-value --secret-id -/entra-client-secret --secret-string --region <aws_region>. Data: Aurora (metadata/embeddings), S3 files, Secrets Manager, CloudWatch /ecs logs. Encryption: AWS-managed at rest; TLS on ALB.
DATABASE: ./db-scripts/aws/setup-aurora-databases.sh then run-aurora-migration.sh (see repo; KEY_PATH, GENM_BACKEND_DIR).
START ECS: If desired_count=0: aws ecs update-service --desired-count 1 --force-new-deployment. App: https://app . API: https://api .
UPGRADES: New Marketplace version -> new tags -> update tfvars -> apply/force deployment; run migrations if release notes say so. No customer rebuild.
MONITOR: aws ecs describe-services; ALB target health backend /health/check, frontend /login; API https://api./health/check ; aws logs tail /ecs/; Aurora RDS monitoring. Alarm on UnHealthyHostCount, ECS CPU/memory.
COSTS: VPC, NAT, ALB, Fargate, Aurora, S3, Bedrock, transfer bill separately. Use AWS Pricing Calculator; raise Service Quotas if needed.
SUPPORT: support-genm@tectu.io
What was trimmed: long shell blocks and the markdown table (replicate commands stay in DEPLOYMENT-STEPS.md, referenced in step 3). Review requirements (prerequisites, config, deploy, monitor, data/encryption, no customer build) are still covered.
Support
Vendor support
Full enterprise support is provided by Tectu, including onboarding, architecture design, deployment, and production support. Our team delivers end-to-end implementation services, from discovery to full-scale deployment, with expertise in AI, data platforms, and enterprise security.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.