VediramYour teams want AI. Now you can say yes.
Levee gives your business users an AI desktop that works on their workbooks, file shares and databases. Each agent runs in an isolated container on the workstation and reaches your data only through Levee, which checks and records every access. Inference runs in Switzerland by default.
Levee is in preview and not yet generally available. We are onboarding design partners now.
Read the Levee documentation- Opened the board packBoard pack Q2.pptx
- Read the finance workbookFinance share
- Updated the slides9 slides, with Q3 figures
- The CFO folder is not available to meThe forecast slide keeps last quarter’s figures
The board pack is updated, except the forecast.
- Windows 11 22H2+
- No Hyper-V needed
- Every access recorded
- Inference in Switzerland
Your business is asking for AI
Your people use AI tools at home and want them for their work. The tools they ask for send prompts and files to servers outside your control, which is why you block them. The work itself sits in workbooks, decks, file shares and databases that a cloud service only sees once you copy the data to it.
Levee gives you an answer your security team can sign.
Everyone else uses AI. Why can’t I use it on my own spreadsheets?
An analystFind me a way to say yes.
The COOShow me how the client data stays in the bank.
Security and risk
The agent reaches what you grant, and nothing else
Grant each agent the folders, databases and sites its work needs. A database grant names the tables the agent may query. Anything left off the list looks to the agent as if it does not exist.
Policy is written centrally and reaches each workstation as a versioned document. Network access is closed by default.
\\research\house-viewReadC:\Users\…\DocumentsRead, writepositions, pricesRead\\research\notesAsk firstclients.nameRefusedSwiss inferenceDefaultOne task, from first file to finished document.
Choose an industry and follow the agent step by step.
An analyst prepares an investment note
A buy recommendation on a product: the figures, the house view, the latest news, and a deck at the end.
Reads the house view
Last quarter’s strategy deck on the research share.
Pulls the positions
What the bank holds in the product, from the portfolio database.
Asks which clients hold it
Client names are outside the policy, so the query is refused.
Searches the issuer’s news
The policy has no rule for this search, so the analyst approves it.
Drafts the deck
With a Swiss model, saved on the analyst’s workstation.
Client names never reach the agent, and the draft is written in Switzerland.
Every way out goes through Levee
The agent’s container has no open network. Each kind of access has its own proxy on the workstation, which checks the request before it reaches anything of yours. Select any part to look inside.
When no rule applies, a person decides
Levee asks the user before an access the policy does not cover. Every channel follows the same six rules.
Closed until you open it. Nothing is reachable until you allow it.In doubt, the answer is no. An unclear request is refused.
A person decides the rest. When no rule applies, Levee asks.Written down first. The record exists before the action completes.
Refusals look the same. A refused request looks like a missing one.Passwords stay on the host. The agent never holds a credential.
Research agent wants to write a new file.
\\research\notes\note-buy.pptxNo rule covers this folder. Your answer is recorded.Every access, written down before it happens
Each decision is recorded with the agent, the resource, the rule and the person who approved it, before the action completes. The trail answers which agent did what, on which data, and who allowed it.
A SYSTEM service writes each record on the workstation, where the agent cannot reach it, and your security team reviews the trail of every workstation in the fleet console.
\\research\house-view\Q3.pptxReadRule: house-view readportfolio.positionsQueryRule: portfolio readcrm.clients.nameRefusedNot granted to this agentSwiss inferenceModelRule: default model\\research\notes\note-buy.pptxWriteAllowed once by M. KellerWhat your security team can check
Isolated container
kernel-enforced, no Hyper-V
Each agent runs in a Windows container using process isolation. Its tools are mounted read-only from a catalogue your administrators curate, and its only way out is through Levee’s proxies, so it cannot reach what it was not granted, even if the model is manipulated.
Kernel firewall
nothing inside has to cooperate
Levee installs Windows Filtering Platform rules for each container when it starts: the proxy ports are open and every other path is blocked. If the proxies are not ready or the filters cannot be installed, the container does not start.
Swiss inference by default
other models only when you allow them
Models run in Switzerland with a Swiss provider, outside the reach of the US CLOUD Act. A model outside the Swiss default is enabled explicitly, for the people and data you choose.
Where each obligation is answered
| Obligation | Levee control |
|---|---|
| FINMA Guidance 08/2024Defined roles and approvals, controls over third-party models, monitoring | Every agent runs under a policy you author centrally. Each access is approved and recorded, and models outside the Swiss default are enabled only by explicit policy. |
| MiFID IIRecords that reconstruct what happened, when, and by whom | The audit trail records every request before it completes: agent, resource, action, policy and timestamp. The agent cannot reach it, and the user cannot rewrite it. |
| DORAControl over the ICT systems you use, with evidence for supervisors | The container limits what an agent can reach, the proxies enforce the permitted set, and the trail documents every access and denial with the policy version applied. |
No software makes an institution compliant by itself. Compliance stays with your legal and compliance team; Levee supplies the access controls and the audit trail they can test.
Roll it out like any other Windows software
- One MSI, through Intune or SCCM
- Central policy, synced to each device
- Every trail in the fleet console
Levee runs on Windows 11 Pro, Enterprise and Education, 22H2 or later. It is in preview: every capability on this page is in the preview build, and we have not yet tested it on virtual desktops (AVD, Windows 365, Citrix).
Give your teams AI on terms your auditor can read.
Design partners run Levee with a real team on real work, shape the rules and the audit format, and take priority when general availability opens.