Built for operators. Ready for your infrastructure.

Four layers, each replaceable: a client on every device you use, a central API, proven storage, and your choice of model providers.

Start trial Book a demo

Four stacked horizontal layers connected by a vertical flow of dots

Client

One app for web, iOS, Android, macOS, Windows and Linux. Adaptive layouts and streaming rendering on every screen.

API

Central API with authentication, tenant scoping, model catalog, MCP orchestration and usage reporting.

Storage

Your own database for identity, tenants, conversations and metadata. Object storage for attachments.

Model providers

Cloud providers by bring-your-own-key, plus local inference endpoints. ocatis routes and governs; it does not train models.

Memory: Optional companions on one deployment: Retivum knowledge graph with inspector UI, plus an MCP server exposing both under the same tool policies.

Multi-tenant isolation

Every query is scoped by tenant identifier at the data layer. No cross-tenant reads. Roles and groups decide which models, tools and settings a member sees.

Security architecture

Secrets encrypted at rest with AES-256-GCM. Password hashes with Argon2. Sessions as RS256-signed JWTs with refresh tokens. TLS in transit, with security headers set at the edge.

Operations

Stateless API, two stateful services. Docker Compose brings up the whole stack with persistent volumes. Upgrades are image swaps with automatic database migration on start.

Next: Deployment →