Sold by: TEKIMAX Inc.
Deployed on AWS
ALOS Gateway is an SI (super intelligence) gateway, not an SI agent. It runs in your own AWS account, and your people, applications and SI agents call models through it with one OpenAI-compatible API. It applies your policy to every call: which models are promoted, who may use them, spending limits, and which actions wait for a person. Every call gets a signed receipt and a plain-language explanation, so regulated teams can use SI on proprietary data and show auditors exactly what happened.
Overview
What it is: ALOS (Authority Ledger for Operating Systems) Gateway sits between the people, applications and SI agents in your organization and the models they use. It is not an agent itself. Every model call goes through it, is checked against your policy, and is recorded.
Who it's for: organizations that want SI on sensitive, proprietary data and answer to auditors or regulators: banks, insurers, healthcare providers, the public sector and their suppliers.
Your cloud, your data: one Helm chart installs the gateway and its web console into your Amazon EKS cluster. It uses your PostgreSQL database and reaches models through an IAM role in your account, so there are no API keys to store and your prompts never pass through our servers.
What's in the console:
- Dashboard: calls, refusals and spend at a glance.
- Decision Trail: why each call was allowed, held or refused, in plain words, with approval arcs and the receipt chain.
- Usage and billing: spend by model, key and call.
- Models: promote the models each team may use, from open-weight models on Amazon Bedrock to your own fine-tuned model on a SageMaker endpoint.
- API keys: keys with their own model list, rate limit and monthly cap.
- Policy: the policy file in force, an editor that checks a change before it applies, and the full history of who changed what.
- Playground: try a call, copy a quickstart or SDK example, or ask questions about your own records, such as which calls were refused this week and why.
- Agents and MCP: register each agent to a named owner. Agents reach the gateway through MCP and act for that person, never with more access than they have.
- Receipts: every call's signed receipt, and a page to verify them.
- Attestations: a person signs a statement about a piece of work, such as a student submission, a research project or a report sign-off, bound to the receipts of the AI help they used and listing the models that helped. A reviewer can countersign, and anyone can check it on a public verify page.
Audit: every call gets a receipt linked to the one before it, signed with ML-DSA-87 (NIST FIPS 204) from a key in your own AWS KMS. Attestations are signed the same way, with the same key. Anyone can check a receipt or an attestation independently, and receipts can be kept under legal hold.
No lock-in: applications use an OpenAI-compatible API, and you can add your own provider keys or model servers, so the gateway works with the models you choose.
What ALOS does not do: it records evidence for your compliance work. It does not certify compliance on its own.
Requirements: an Amazon EKS cluster, a PostgreSQL database, an IAM role for the gateway's service account, and your own domain with an HTTPS certificate. Sign-in uses our hosted sign-in service, which sees who signs in but never your prompts or data.
Highlights
- An SI gateway, not an agent: your people, apps and SI agents call models through one OpenAI-compatible API in your own AWS account, and prompts, receipts and decisions stay in your database.
- Your policy on every call: promote the models each team may use, set spending limits per key, hold permanent actions for a named person, and register every agent to an owner it can never exceed.
- Audit and explain: signed, linked receipts and signed attestations anyone can verify, a Decision Trail that says why each call was allowed, held or refused, and a Playground where you ask questions about your own records.
Details
Sold by
Categories
Delivery method
Supported services
Delivery option
Latest version
Operating system
Linux
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Organization | One ALOS organization running in your AWS account | $24,000.00 |
Dimensions summary
This listing uses a single contract dimension billed per ALOS organization. One unit covers one ALOS organization running in your AWS account. Pricing scales by the number of organizations you run, so adding another organization means adding another unit. There are no tiers, instance sizes, or usage add-ons to choose between. The software governs your super intelligence calls, keeping each one observable, audited, and under a named person's control. You run it in your own AWS account.
Top-of-mind questions for buyers
One ALOS organization is a single instance of the software running inside your own AWS account. Each organization you run counts as one unit. If you set up a separate organization for another business unit or environment, it adds another unit to your bill.
No. Billing is per ALOS organization, not per call. You can observe, record, and explain any number of super intelligence calls under one organization without changing the unit count. Cost only changes when you add or remove an organization.
That depends on how you structure your organizations. Each ALOS organization is billed as one unit. If different teams or environments run as separate organizations, each adds a unit. Running them under a single organization keeps you at one unit.
tekimax.com
Helpful?
Vendor refund policy
Refunds of a yearly contract are available within 30 days of purchase on request to support@tekimax.ai . After 30 days, refunds are at TEKIMAX's discretion.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
ALOS on Amazon ECS (CloudFormation)
Supported services: Learn more
- Amazon ECS
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
First release of ALOS for AWS: the ALOS app in your AWS account on Amazon ECS (Fargate), its database and files on encrypted Amazon EFS with daily backups, HTTPS at an Application Load Balancer with post-quantum key exchange, keys generated into AWS Secrets Manager, a yearly licence checked with AWS License Manager, and optional ALOS Mediate as an advisory pre-check on agent actions.
Additional details
Usage instructions
Launch ALOS for AWS with one CloudFormation stack.
- Download the launch template: https://d22ytkibdvmggp.cloudfront.net/alos-for-aws/1.0.0/alos-for-aws.yaml
- In the AWS CloudFormation console (us-east-1 recommended), choose Create stack, With new resources, Upload a template file, and select the downloaded file. Stack name: alos.
- Set PublicUrl to the https address people will use (for example https://alos.example.com ) and CertificateArn to an AWS Certificate Manager certificate for that host in the same Region. Sign-in needs HTTPS with your own domain and certificate. Leave the "Listing and platform (leave as is)" parameters unchanged. To add ALOS Mediate, paste your Mediate model package ARN from its own subscription; otherwise leave it empty.
- Acknowledge that the stack creates IAM roles, and create it.
- Point your domain's CNAME (or alias) at the LoadBalancerDns output, then send TEKIMAX (support@tekimax.ai ) the https address so sign-in accepts it.
What runs where:
- Records, projects, files, approvals, the audit trail and its checkpoints, scheduled jobs: your AWS account (Amazon ECS on Fargate, encrypted Amazon EFS with daily backups).
- ALOS Mediate's model, gateway and decisions (when added): your AWS account (SageMaker, Lambda, API Gateway).
- Identity and sign-in, governance metadata, the agent registry: TEKIMAX's ALOS platform.
- AI model requests: through the ALOS platform's model gateway, as the signed-in person, to the models your organization promotes. The text of a request leaves your account.
Known limits:
- One copy of the app: no high availability yet. An update stops the old copy before starting the new one.
- Not available in this edition yet: live documents and boards, video calls, training data imports, and email (outbound and inbound).
- Sign-in needs HTTPS with your own domain and certificate; send TEKIMAX the address so sign-in accepts it.
- Mediate deploys in us-east-1.
Licence: the app checks your AWS Marketplace licence with AWS License Manager at start and every hour. With a lapsed or missing licence, reads and exports keep working, new changes and agent work are refused, and nothing is deleted.
The data volume and generated keys are kept if the stack is deleted. Support: support@tekimax.ai .
Support
Vendor support
Email support from TEKIMAX at support@tekimax.ai , business days, response within one business day.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
AGLedger is change control for AI agents, delivered as a self-hosted signed ledger. Audit trail, approvals, agent memory and notifications: one API, one signed ledger. Every change an agent records is signed and hash-chained in one API call, and anyone holding the public keys can verify the chain offline. Routine changes are recorded and move on; the consequential few wait for a verdict from your own system or a person. Runs on Amazon EKS or any Linux host, air-gapped if you need it. You hold the database, the keys and the records.
This support service ensures the continuous operation and health of enterprise blockchain networks deployed with GoChain orchestration, covering both Hyperledger Fabric and Private Ethereum. Services include performance monitoring, transaction tracking, asset consistency, certification authority management, smart contract lifecycle support, and node/organization onboarding.
- Proactive network health checks
- Operational & security support
- Smart contract and integration management
This professional service is designed for customers using GoChain on AWS Marketplace.
Initial setup of a custom Hyperledger Fabric or private Ethereum network with guided deployment, training, and tailored documentation.
- One-time fixed price
- Collaborative network design workshop
- Guided Hyperledger Fabric or private Ethereum deployment using GoChain
- Full platform onboarding and team training
- Custom documentation for the deployed network
AI Gatekeeper brings 3D Protection to AI and Agentic applications, everywhere you deploy AI.
Deploying AI Applications and Agents at scale means you need security coverage across LLMs, containerized models, internal and 3rd AI APIs as well as cloud services that power your GenAI environments.
AI Gatekeeper discovers, detects, and defends all of your AI workloads at runtime everywhere you deploy AI, across public, private and hybrid cloud platforms.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.