OPENRIFT // ENTERPRISE // SEA

Bespoke,
at scale.

For SEA businesses past 50 staff, with regional operations and a procurement function. White-glove deployment, dedicated infrastructure, regional data residency. One contracting party for agents across every BU.

4
Regions live
SG · MY · ID · TH
99.9%
Uptime target
Enterprise SLA
2–4 wks
Contracting cycle
Standard MSA
48 hrs
Security replies
Q&A turnaround
01 / PROCESS

White-glove deployment.

Discover · architect · pilot · roll out
01

Extended discovery

Three to six weeks. Multi-stakeholder interviews — execs, BU leads, the folks doing the actual work. We don't quote until we understand how decisions get made.

  • Exec alignment workshop
  • BU-by-BU workflow audits
  • Existing-vendor stack map
  • ROI model with finance
02

Architecture review

Where the agents live, where the data flows, what touches what. We sit with your security team and IT. Joint risk register. Joint sign-off before any code is written.

  • Joint architecture doc
  • Data flow + residency map
  • Risk register · joint sign-off
  • Sub-processor list reviewed
03

Pilot deploy

One BU, one to three high-ROI workflows. Eight to twelve weeks. The pilot is the proof — exec readouts every fortnight, hours-saved tracking from day one, hard kill criteria agreed up front.

  • Single BU, scoped agents
  • Fortnightly exec readouts
  • Hours-saved tracked weekly
  • Pre-agreed kill criteria
04

Group rollout

Pilot graduates. We expand across business units, regions, languages. One oversight dashboard. One contracting party. Your group CIO has a single throat to choke.

  • BU-by-BU expansion plan
  • Cross-region orchestration
  • Single oversight dashboard
  • Quarterly steering committee
02 / INFRASTRUCTURE

Your stack, isolated.

Compute · residency · keys · DR
SG
Singapore
Default region · ap-southeast-1 · PDPA aligned
MY
Malaysia
Kuala Lumpur · PDPA 2010 · in-region inference
ID
Indonesia
Jakarta · PP 71 / UU PDP · local LLM routing
TH
Thailand
Bangkok · PDPA BE 2562 · regional routing
Isolated compute

Your engagement runs on dedicated compute, not multi-tenant. Containers, queues, model gateways — all carved out for you. No noisy neighbours, no shared cache.

Regional data residency

Pick where your data lives. Singapore (default), Malaysia, Indonesia, Thailand. Storage, processing, model inference — all in-region. We surface a data-flow diagram so your compliance team can sign off.

Private model routing

Route to Anthropic via AWS Bedrock in-region. Route to Azure OpenAI in your tenant. Or route to a regional provider for data-sovereignty reasons. We don't lock you to a single LLM.

VPC peering / private link

Tools that can't be exposed to the public internet stay inside your VPC. We peer in. Agents call your internal services over private link, never over the wire.

Bring your own key

Customer-managed encryption keys. KMS lives in your AWS or GCP account. We hold ciphertext, you hold the key — revoke any time and we go dark.

Backup + DR

Multi-AZ in primary region. Daily snapshots, 30-day retention. Cross-region DR available on request — RPO 1 hour, RTO 4 hours. Tested quarterly.

03 / ROLLOUT

One BU. Then the group.

Pilot → expansion → group
We don't big-bang the group.
We prove it in one BU,
then expand under single oversight.
Phase 0
Anchor BU
One business unit, one country. Most often: ops or finance team in HQ. Eight weeks to first running workflow.
Phase 1
Adjacent BU
Expand to a neighbouring function — usually marketing, sales ops, or customer success. Reuse the foundation. Six weeks.
Phase 2
Cross-region
Same playbook, second country. Localisation, language, tool variants. Eight to twelve weeks per region.
Phase 3
Group-wide
Standard offering across BUs. Self-service workflow requests via an internal portal. Quarterly steering with group exec sponsor.
04 / SLAs

Sized to your appetite.

Uptime · response · credits
Metric
Standard
Enterprise →
Uptime
99.5%
99.9% (four nines optional)
P1 response
Same business day
15 min · 24/7 on request
P2 response
Next business day
2 hours · business hours
Maintenance window
Best-effort
Agreed window · SG midnight default
Service credits
Tiered, on missed SLA
Quarterly business review
On request
Standard · exec attendance

All SLA targets are bespoke. Four-nines uptime and 15-minute P1 require dedicated compute and 24/7 on-call — agreed in the MSA, priced in the statement of work. Service credits are tiered to severity and to the duration of the breach.

05 / PROCUREMENT

Procurement loves us.

MSA · NDA · DPA · SIG

MSA-ready

We work from your Master Services Agreement, or we provide ours. Both are clean — we've been through enterprise legal in SG, MY, ID, AU, and the US. Typical contracting cycle is two to four weeks.

NDA pre-signed

Mutual NDA on request, returned same day. Standard SG terms, no hidden carve-outs. We sign yours if you prefer.

Security questionnaire

SIG Lite, CAIQ, CSA STAR — we maintain pre-filled responses for each. Custom questionnaires turned around within five business days.

SOC 2 report

Type 1 report under NDA. Type 2 in progress, expected Q3 2026. Sub-processor list, DPA, BCDR docs all available in the procurement pack.

Insurance

Professional indemnity SGD 5M. Cyber liability SGD 2M. Certificates of insurance issued within 48 hours.

Vendor onboarding

We complete your vendor registration, banking forms, and risk assessment. One point of contact through your procurement portal. We've used Ariba, Coupa, SAP Fieldglass.

06 / ROADMAP

What ships for enterprise.

SSO · RBAC · BYOK · audit
Q2 2026

SSO — SAML + OIDC

Federated identity with your IdP. Okta, Azure AD, Google Workspace, JumpCloud. SCIM provisioning for user lifecycle.

Q3 2026

RBAC at the role level

Map your enterprise roles to agent capabilities. Finance gets finance tools, engineering gets engineering tools, exec gets everything.

Q3 2026

Audit log streaming

Stream every agent action to your SIEM. Splunk, Datadog, Sumo Logic, native S3 / GCS. Real-time, immutable, signed.

Q4 2026

Customer-managed keys

BYOK via AWS KMS, GCP Cloud KMS, or Azure Key Vault. Revoke any time, we go dark within minutes.

Q4 2026

Private VPC deploys

Run the entire stack inside your VPC. We supply the Terraform, you supply the AWS account. For regulated industries that need it.

2027

SOC 2 Type 2 + ISO 27001

Type 2 covers 6+ months of operating effectiveness. ISO 27001 full body audit. Both go in your procurement pack.

Talk to sales.

Tell us about the group. We'll come back within one business day with the procurement pack, sample architecture, and a proposed pilot scope.

One contracting party·SG-registered·SGD or USD invoicing·Net 30