Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
## An Ownable Agentic AI Operating System
ibl.ai/os is an open-source Agentic AI Operating System you deploy on your own infrastructure with full source-code and data ownership. Build, deploy, and manage intelligent AI agents from prototype to production, in minutes. It is the AI foundation your organization owns, not rents.
Show the rest of the publisher’s description (23 more lines)
**Run Anywhere, on Any Model**
- One codebase runs everywhere across web, macOS, Windows, iOS, Android, and Linux.
- Run any LLM (OpenAI, Anthropic, Google, Meta Llama, Mistral, or your own) and switch anytime; no vendor lock-in.
- Deploy in your cloud, VPC, on-premise, or air-gapped.
**Build Powerful Agents**
- Assemble agents with configurable models, tools, and safety filters.
- Add Projects, Canvas/Artifacts, MCP servers, RAG on your own data, web search, Deep Research, and real-time voice.
- Go from prototype to a working, governed agent in minutes.
**Enterprise-Ready**
- Multi-tenancy and SSO/RBAC (OAuth, OIDC, SAML).
- Usage-based credit billing that scales with usage, not seats.
- Embed mode, custom domains, and full whitelabeling.
- SOC 2 Type 2. MIT-licensed.
**Why ibl.ai/os**
- Full ownership of your source code and data on your own infrastructure.
- No vendor lock-in: LLM-agnostic and open-source.
- Predictable economics: credit-based pricing that scales with usage, not headcount.
- Runs where you do: your cloud, VPC, on-premise, or air-gapped. Your keys, your control.
Source: github.com/iblai/os
App: os.ibl.ai
Docs: ibl.ai/docs
Pricing: ibl.ai/pricing
Experience ibl.ai/os today.
Highlights
Highlighted by the publisher on AWS Marketplace.
Deploy on Your Own Infrastructure: An open-source Agentic AI Operating System you run in your cloud, VPC, on-premise, or air-gapped with full source-code and data ownership. Build, deploy, and manage intelligent AI agents from prototype to production in minutes.
Any Model, No Vendor Lock-In: Run any LLM from OpenAI, Anthropic, Google, Meta Llama, Mistral, or your own and switch anytime. One codebase runs everywhere (web, macOS, Windows, iOS, Android, Linux). MIT-licensed and LLM-agnostic, so you are never tied to a single provider.
Enterprise-Ready & Governed: Multi-tenancy, SSO/RBAC (OAuth, OIDC, SAML), usage-based credit billing that scales with usage not seats, embed mode, custom domains, and whitelabeling. SOC 2 Type 2. Add Projects, Canvas/Artifacts, MCP servers, RAG on your data, web search, Deep Research, and real-time voice.
Preview
4 images
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment
Plans and pricing as listed
4 listed- Units
- Units
- Units
- Units
Refund terms
As stated by the publisher on AWS Marketplace.
30 days
Sources
Publisher resources
3 linksLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.