Every team chooses a different endpoint
Centralize allowed and denied model decisions while preserving provider choice for approved workloads.
Model and cost governance
Define approved models by tenant, team, application, user, and environment; measure provider usage and estimated cost; and apply the same content controls across cloud, private, and local models.
Why teams act
Entrovik gives security, platform, compliance, and application teams a shared technical boundary without coupling enterprise policy to one provider SDK.
Centralize allowed and denied model decisions while preserving provider choice for approved workloads.
Attribute token usage and estimated cost to tenant, application, team, and principal with configurable pricing tables.
Make fallback models and cheaper-route actions part of explicit governance instead of hidden application behavior.
Enforcement model
Every decision can use normalized content plus tenant, identity, team, application, provider, model, stage, and configured policy metadata.
01Apply model policy using tenant, identity, application, team, and environment metadata available to the pipeline.
02Configure daily and monthly limits with warn, deny, or route-to-cheaper-model behavior.
03Normalize provider inputs and outputs so common enterprise rules remain portable across adapters.
04Track requests, blocks, redactions, failures, tokens, and estimated cost without returning secret values.
In the request path
Policies remain modular packages. The core resolves, executes, contains, explains, measures, and audits them.
Authenticate the API client or corporate identity and resolve its tenant, application, roles, and teams
Evaluate request, model, and cost policy before selecting the configured provider adapter
Route only to an approved active provider and effective model
Capture normalized usage reported by OpenAI, Anthropic, Gemini, or compatible endpoints
Expose tenant-scoped analytics and audit evidence to authorized administrators
Technical FAQ
No. It creates a consistent governance layer across approved providers and model families.
No. Model input and output rates are deployment configuration so finance teams can update estimates without changing gateway code.
Yes. Teams, principals, applications, roles, and tenant metadata provide the scope needed by model policies.
Not by default. Non-idempotent AI requests are not blindly retried, and routing changes must be explicit policy outcomes.

Put it in front of a real workflow
Bring one provider path, one policy requirement, and the architecture your reviewers need to trust.