VediramVediram
Levee

The governance layer for AI agents on the enterprise workstation.

Levee lets security-conscious enterprises run AI agents on real systems and real data. Each agent runs in a kernel-enforced container and every network call passes through a policy you control. Every action is recorded as audit evidence.

Levee is in preview and not yet generally available. We are onboarding design partners now.

Policy decision
A representative Levee audit-trail entry. Every governed request writes the same fields whether it is allowed or denied; only the decision differs. timestamp: 2026-03-11T14:32:07Z, agent: claude-code, channel: proxy-db, action: query, resource: db://prod-finance/ledger, policy: db-readonly-v5, decision: DENIED, session: ws-0042

Written at the enforcement layer, before the action completes. Not self-reported by the agent.

Kernel-enforced container
Enforced by the OS, whatever the model decides.
Seven governed channels
Web, LLM, database, registry, file, search, Office.
Immutable audit trail
The record precedes the action, every time.
No virtual machine required
Runs natively in a Windows 11 container.
Deck

Your Office runs add-ins you never chose. Deck lets you decide what loads.

Deck finds every add-in across nine Office apps, lets you group the ones you need into profiles of your own, and names the add-in behind a crash. IT keeps the whole fleet under one set of rules.

Active profile

Activating a profile decides which add-ins Office loads.

A profile a Deck user has defined for themselves. Activating a profile decides which add-ins Office loads. Profile Month-end close: Contoso CRM Pane (COM, Outlook): enabled, FinReport (XLL, Excel): enabled, Pivot Toolkit (VSTO, Excel): enabled, DocStamp (COM, Word): enabled, Meeting Notes (Web, Outlook): disabled
Five add-in kinds
COM, VSTO, XLL, Automation, and Office web add-ins.
Nine host apps
Excel, Outlook, Word, PowerPoint, and five more.
Profiles you define
Group the add-ins each way of working needs.
Managed centrally
IT sets the same rules across the whole fleet.