Own your
data.
Start with AI without giving it away. Agent Aech is an AI co-worker that lives in your email and Teams — and runs in your cloud or on your own appliance, on your data, under your rules.
Most AI asks you to send your business somewhere else. Your documents, your customers, your know-how — rented back to you by the month. We think that’s backwards. The businesses that win with AI will be the ones that own it.
If you use email, you’re ready.
Agent Aech has its own Microsoft 365 identity. Your team emails it, mentions it in Teams, or hands it a recurring schedule — exactly like a colleague.
The runtime checks who’s asking.
A trusted runtime inside your environment authenticates the sender, applies your exact access policy, and decides what this request is allowed to touch — before any AI runs.
A fresh worker does the thinking.
Each request gets a short-lived worker that sees only what it needs: this agent’s files, this person’s context, this conversation. It never holds your Microsoft 365 keys.
Real work, in your real systems.
ERP, accounting, CRM, project tools, SharePoint. Memory is written to plain files you can read — and every change is reviewed before it lands.
The answer comes back where you asked.
The runtime delivers the reply to the same thread, with a full record of what was read, done and sent. Nothing left your environment that you didn’t allow.
Everything that matters stays yours.
Your infrastructure.
Runs in your own cloud (your Azure subscription and Entra tenant) or on an Agent Aech appliance with local inference. Aech never takes custody.
Your data.
Customer data lives in customer-controlled storage. Memory is files, not a vendor’s database.
Your identities.
Each agent gets a Microsoft Entra Agent ID, with permissions you approved — nothing more.
Your logs.
Every run leaves evidence: touched files, tools used, usage and deliveries. In your storage.
Your models.
Run inference locally on the appliance, or through your own Azure OpenAI / Foundry tenant.
Your brand.
Fully white-labelled: your name and logo across the agents, the apps and the management console.
Every rule written down. Every run on the record.
Governance isn’t bolted on after a pilot. It’s how Agent Aech is built.
- Exact users and domains per agent — wildcards rejected
- Workers are ephemeral, untrusted and credential-free
- Memory scoped to agent, user and thread
- Protected instructions can’t be edited by ordinary runs
- Allow-listed outbound network only
- Digest-pinned images and an evidence package at deploy
- Audited, provable removal — if you ever leave
ingress email from=dana@yourco.com thread=Q3-sellthrough auth DMARC pass · principal=dana@yourco.com policy role=sales · capabilities=[sap.read, reports, schedule] mount agent/ · user/dana · thread/Q3-sellthrough worker spawned · network=internal · credentials=none tool sap_b1.query sell_through region=Calgary write work/reports/calgary-lemon-355.xlsx exit review approved · 1 file touched schedule intent: weekly Mon 07:30 (deduplicated) deliver reply → same thread via Graph # recorded in .aech/sessions/… in your storage
Your agent doesn’t just answer. It builds.
When a workflow is proven over email, the agent turns it into a durable web app — a dashboard, an approval queue, a CRM you own. Apps sign in with Microsoft, call only the reviewed reads and actions they declare, and never see a credential.
Sealed from your screen to your systems.
Your agent builds the app and its backend, then publishes it as a signed release. Every click and every chat message after that travels sealed, and only your environment can open it.
Only the people you allow.
People sign in with Microsoft, on desktop or phone. The App Host checks that this person is allowed to use the agent (permissions live with the agent, not with each app), then serves the signed release. The page gets a key that lives for minutes and never leaves it.
Sealed in the browser.
Every click, every call to the app’s backend and every chat message with the agent is encrypted to your agent’s own public key and signed by the page before it leaves the screen.
Carried, never read.
The Aech Relay checks the seal, the expiry and that the request is new, then passes it on. It holds no key that can open it.
Opened only in your environment.
Your runtime connects out to the relay; nothing connects in. It opens the request with the agent’s private key and checks again that this person still has access, right now.
Real work, sealed on the way back.
The backend function the agent wrote runs with the agent’s own connections to your systems. The answer returns sealed the same way. The app never holds a credential.
Your other agents use the same door.
Builders and power users connect Claude Code, Codex, Copilot, Cursor, OpenClaw and other agents through your agent’s plugin. Their requests are sealed the same way, carried by the same relay and checked against the same permissions inside your runtime.
Less toil. Same team. More business.
An inherited AP backlog, handled by agents in Teams and email.
After another AI vendor’s automations broke in real use, Prostock got purpose-built agents working inside their existing systems — with a custom path around an outdated ERP.
Live SAP reporting and one national distributor view, in eight weeks.
Agent Aech connected directly to SAP Business One — privacy and governance at the centre — then unified regional distributor data. Anyone can now ask about any product, in any store, in any Canadian city.
Small business? We’ll build it for you.
Pick one real workflow. We build an agent for it that works in your email and Teams, on infrastructure you own: the Agent Aech appliance with local inference, or your own cloud.
Agent Aech never takes custody of customer data or systems. They belong strictly to you.
$10,000 one-time + $1,000/month
First agent included · same price in CAD or USD
- Works inYour email and Teams
- Runs onThe Agent Aech appliance with local inference, or your own cloud
- More agents$5,000 to build, then $500/month each
- Prefer your MSP?We partner with IT providers
A pod is a team. Most of it is yours.
Velocity Pods are fixed-term, fixed-price programs. One Aech builder works side by side with your people to put agents into production, and trains an internal owner to build new agents themselves, not just run the ones delivered. When the pod ends, the capability stays. It’s yours.
MSP Velocity Pod
$3,750 USD / $5,000 CAD per month
Per participating business · 6 minimum · six months
The same model, designed for managed service providers. Your technicians join the pod with a cohort of at least six of your small-business clients, and your MSP leaves with a new line of business.
- TeamOne Aech builder with your technicians
- CohortAt least six of your clients per pod
- Revenue shareHalf the pod revenue your clients pay
- ClientsEvery participating business leaves with agents doing real work every day
- Self-serveYour technicians build and support agents for your clients
- You keepThe client relationships, the scoping, the integration work and the margin
- Aech suppliesThe agent platform, the best business agents and new AI capabilities as they arrive
- LicensingPlatform and runtime included during the pod; partner pricing after it
- BrandFully white-labelled: your clients see your MSP’s brand
Enterprise Velocity Pod
$22,500 USD / $30,000 CAD per month
Six months, fixed
For larger organizations that want AI in production, in their own environment and under their own governance, and a team that can keep building.
- TeamOne Aech builder with your people
- OutcomeAgents doing real work starting the first month
- WhereYour cloud and your Entra identities, under your governance
- HandoffYour internal owner trained to build new agents on their own, as many as you need
- LicensingPlatform and runtime included during the pod; after it, $250/month per deployed agent you keep running
- BrandFully white-labelled: agents, apps and platform under your brand
Your brand, end to end. The whole Agent Aech platform (agents, apps and the management console) can run fully under your name and logo. Enterprises roll it out as their own. MSPs sell it as theirs.
Blocked? The pod keeps moving.
Enterprise AI rarely stalls because the AI can’t do the work. It stalls on security reviews, access, data readiness and sign-offs. That’s normal, and your business needs time to adjust. So a pod keeps many agent projects in flight at once. When one waits, your builder moves straight to the next, and comes back the moment it clears.
Many in flight.
AI lets one builder drive several agent projects at the same time.
Blockers expected.
Reviews and approvals take the time they take. Nothing else waits on them.
Capacity that adapts.
Your pod is reserved for your business and flows to whatever can move today.
Your business moves at the speed of AI, not the speed of its slowest approval.
- Form the podOne Aech builder joins an internal owner you choose, or, for an MSP, your own technician.
- Build and deliverAgents go to work on real workflows, in email and Teams, on your systems.
- Train by doingYour owner builds alongside Aech, then takes the lead while Aech coaches.
- Hand it overAech steps out. The agents, the data and the know-how are yours.
- Stay currentNew capabilities keep arriving through the Agent Aech network.
A new line of business, not just a new tool.
Your clients already trust you with their IT. During the pod, you earn half the revenue they pay for it. The split follows the work: a third at first, two-thirds by the end. After the pod, you sell them AI too, and you build the software they’ve always wanted, all on the Agent Aech platform.
Sell AI services.
Put AI agents in your service catalogue: a recurring revenue line alongside managed IT. You keep the relationships, the scoping, the integration work and the margin.
Build software.
Dashboards, approval queues, CRMs, portals. Agents build them as Aech Apps on the Agent Aech platform, so you don’t need a separate dev stack.
Keep your brand.
Fully white-labelled: your name and logo on every agent and app. Run every client from one console, with governance built in.
Start with AI.
Keep everything.
One workflow. Your data. Your systems. Your team, amplified.