Sovereign data & AI · open source

From raw data to AI agents in production.On your infrastructure.

graal publishes two open source platforms, independent and complementary: the Data Platform, from source to model in production, and the Agentic Platform, where your AI agents move your processes forward under measured guarantees. Both install on your infrastructure.

  • Apache 2.0
  • On-premises
  • Private cloud
  • Qualified hosting

Demo

An agent does the work. Your guarantees decide.

A data change, from request to production: the agent works in its sandbox, the guarantees check, a person approves, the Data Platform applies — and everything is evidenced.

DATA-142 · add the feels-like temperature to the forecast

  1. A ticket arrives
  2. The agent works
  3. The guarantees check
  4. A person approves
  5. The Data Platform applies

graal Agentic Platform· “data change” workflow

  1. Ticket receivedDATA-142 · from your tracker
  2. Agent at workclaude-code · sandbox · budget €3.00
  3. Change proposedbranch data-142 · prevision_conso.py · +14 −3
  4. Guaranteestests run 12/12 · quality on a sample ✓ · scope ✓ · no secret ✓
  5. Human approvalCamille M. · re-authenticated · approved
  6. Appliedthrough the Data Platform API
  7. DoneDATA-142 closed · evidence attached to the ticket

graal Data Platform· what happens there

  1. ◆ agentdescribe_tablecurated.conso_regionale✓ read
  2. ◆ agentquery_sqla 1,000-row sample✓ 1,000 rows
  3. ◆ agentget_jobprevision-conso✓ read
  4. ⚙ platformupload_codeprevision-conso · v13✓ uploaded
  5. ⚙ platformrun_jobprevision-conso● run-1286
  6. ⚙ platformget_runrun-1286✓ succeeded in 41 s

Evidence

Tests run
12/12 ✓
Cost of the ticket
€0.84
Approved by
Camille M.

Animated illustration of a demo scenario, not a screenshot: ticket, people, costs and identifiers are fictitious.

The job list of a project in the Data Platform console: name, type (Spark, Python, low-code, bash), status, last run, duration, schedule and owner. Several rows carry an “Agent” badge.The job list of a project in the Data Platform console: name, type (Spark, Python, low-code, bash), status, last run, duration, schedule and owner. Several rows carry an “Agent” badge.

The jobs of a project in the Data Platform, their status and their last run. Rows marked “Agent” were created by an AI agent through MCP.

Real graal console interface, not retouched; fictional demonstration data (tenant energie-demo — people, projects and tokens are invented).

Activity feed of an AI agent: creating, running and then scheduling the prevision-conso job.
Agentagent · claudeLive
  1. create_jobprevisions/prevision-conso✓ created
  2. run_jobprevision-consorunning
  3. schedule_job0 6 * * *✓ scheduled

Service account agent-previsions · project previsions

Built on open standards

  • Kubernetes
  • Helm
  • Apache Iceberg
  • Trino
  • Apache Spark
  • Jupyter
  • MLflow
  • Keycloak
  • PostgreSQL
  • S3
  • MCP
  • OpenTelemetry

Two products

Two open source platforms. Independent, and built to work together.

Take one, the other or both: each installs and runs on its own, under the Apache 2.0 license.

graal Data Platform

From source to model in production.

  • Connectors: databases, files, APIs, Hadoop estate
  • Low-code pipelines exported as code
  • Jobs, workflows and scheduling
  • Iceberg lakehouse and SQL with Trino
  • Jupyter, VS Code and RStudio notebooks
  • ML and generative AI: serving, LLM gateway, RAG
  • Governance: permissions, audit, secrets, costs
  • Run by your agents, through MCP
Discover the Data Platform

graal Agentic Platform

Your AI agents move your processes forward, under measured guarantees.

  • Workflows of agents and people, for any line of work
  • Any agent: Claude Code, Codex, Gemini CLI…
  • Guarantees that refuse, not instructions
  • Re-authenticated human approval
  • A sandbox and a capped key per run
  • Model gateway and cost ledger
  • A tool catalog, no tool credential handed to the agent
  • Measured evidence and audit trail
Discover the Agentic Platform

Together

  1. Your agents operate the Data Platform

    The Agentic Platform’s agents operate the Data Platform through its MCP server, under a service account scoped to one project; every call is traced on both sides.

  2. A data change, governed end to end

    Branch, guarantees (tests run, data quality on a sample, measured facts), human approval, application through the Data Platform API, evidence attached to the ticket.

  3. One foundation

    Your company SSO (OIDC, SAML, LDAP), the same audit conventions, the same installation: Helm, no cluster-admin rights, restricted pods, on your infrastructure.

graal Data Platform

The whole data & AI lifecycle, on one platform

From the first connected source to a model served in production, without assembling ten tools.

Connectors

Your databases, files, APIs and Hadoop estate, connected in minutes.

Low-code pipelines

Draw a pipeline: the Data Platform writes the Pandas or PySpark code, and it belongs to you.

Lakehouse and SQL

Iceberg tables on your S3 storage, federated SQL with Trino, catalog and lineage.

Notebooks

Jupyter, VS Code and RStudio in the browser, with a coding assistant wired to your own model.

ML and generative AI

Experiments, model registry and serving; an LLM gateway and RAG over your documents.

Run by your agents

An MCP server so your agents create, run and schedule work, under your rules.

Governance

Per-project permissions, an audit trail of human and agent actions, encrypted secrets, costs and quotas.

Openness

Open source, exportable code, open formats, REST API, MLflow and MCP: nothing locks you in.

How it works

From raw data to a model in production

One source, one secret, and it's wired.

  • Databases, files, S3, SFTP and REST APIs
  • Encrypted credentials, never written into code
  • Schema detection and data preview
Interface illustration

The Data Platform, run by your agents

Your agents operate the Data Platform. Under your rules.

The Data Platform exposes an MCP server. The Agentic Platform’s agents, Claude or any compatible client create, run and schedule jobs through a service account scoped to one project, and every action shows up live in the console.

  • One service account per project
  • Human approval for sensitive actions
  • No destructive tool enabled by default
  • Every call visible live
  • Instant revocation
  • Audit trail of humans and agents

You choose the model: hosted on your premises, or with the provider of your choice.

Activity feed of an AI agent: listing runs, reading logs, creating, running and scheduling a job.
Agentagent · claudeLive
  1. list_runsprevisions✓ 12 runs
  2. get_run_logsrun-1284✓ read
  3. create_jobprevisions/prevision-conso✓ created
  4. run_jobprevision-consorunning
  5. schedule_job0 6 * * *✓ scheduled

Service account agent-previsions · project previsions

The “Agents” panel of the Data Platform console, open next to the job list: the connected agent-mcp service account, its permissions (read, write) and its live tool calls (get_run_logs, list_jobs, run_job, schedule_job, upload_code, get_costs).The “Agents” panel of the Data Platform console, open next to the job list: the connected agent-mcp service account, its permissions (read, write) and its live tool calls (get_run_logs, list_jobs, run_job, schedule_job, upload_code, get_costs).

The Data Platform “Agents” panel: who is connected, with which permissions, and every tool call live.

Real graal console interface, not retouched; fictional demonstration data (tenant energie-demo — people, projects and tokens are invented).

Deployment

Installed on your infrastructure. In a few commands.

One Helm chart per platform, no cluster-admin rights and no custom resources: graal runs where your data lives.

  • Helm
  • OpenShift
  • High availability
  • Offline (air-gapped)
  • GitOps
  • Backup and restore

Your teams · SSO

◆ Your AI agents · MCP

graal Data Platform

  • Console
  • REST API and MCP
  • Jobs and workflows
  • Notebooks
  • Distributed Spark
  • Model serving

graal Agentic Platform

  • Console
  • API and MCP door
  • Agent workflows
  • A sandbox per run
  • Model gateway
  • Tool catalog

◆ MCP → graal Data Platform

Shared foundation

  • Identity · Keycloak (SSO)
  • PostgreSQL
  • Audit · OpenTelemetry

Your resources

  • S3 storage
  • LDAP / AD directory
  • Image registry
  • Observability
  • Your AI models

Your Kubernetes cluster · on-premises, private cloud or qualified hosting

On-premises

Your datacenter, your Kubernetes or OpenShift.

Private cloud

Your cloud, your account, your network rules.

Qualified hosting

Deployable with a SecNumCloud-qualified or HDS-certified hosting provider.

Open source

Open source, under the Apache 2.0 license.

Both platforms are free software: you can install, study, modify and redistribute them. The vendor subscription adds what production requires.

See pricing

Free, for any use

The Apache 2.0 license allows any use, commercial included, royalty-free.

Open end to end

Open formats (Parquet, Iceberg), standards (SQL, MCP, OpenTelemetry), exportable pipeline code: you leave with your work.

A committed vendor

The vendor subscription: support, security fixes, qualified updates and signed images, per vCPU, unlimited users.

Use cases

What you build with graal

Energy

Forecast energy demand

Temperatures and regional consumption in a thermosensitivity model, refreshed every morning.

Cross-industry

Operations run by agents

Agents that watch runs, diagnose and propose a fix, approved before it is applied.

IndustriesBrowse industries

Who it's for

Two platforms, five requirements

Two open source platforms instead of ten building blocks, on your infrastructure, at a predictable cost.

See pricing
  • Open source, under the Apache 2.0 license
  • Per-vCPU subscription, unlimited users
  • Installed and upgraded with Helm and GitOps

Trust

Trust you can verify

  • Restricted pods (PSA restricted)
  • SSO with OIDC, SAML and LDAP directories
  • Permissions per project and per resource
  • Secrets encrypted at rest (AES-GCM)
  • Audit of human and agent actions
  • No telemetry, no third-party service

Sovereign, strictly defined

  1. 01The platform and the data run on the infrastructure you choose.
  2. 02No third-party service is required for it to work: no SaaS, no telemetry, no external fonts or captcha.
  3. 03The vendor, which also integrates and supports the platform, is a French company (GRAAL.SYSTEMS SAS).
  4. 04Pipeline code is exportable and formats are open (Parquet, Iceberg, SQL, MLflow API).
  5. 05The code of both platforms is open source, under the Apache 2.0 license.
Trust center

Get started

Start with an 8-week pilot

One use case end to end, on your data, in your infrastructure, with the Data Platform, the Agentic Platform or both. Then you decide, on evidence.

Discover the pilot
  1. Week 1

    Scoping: one use case, clear success criteria

  2. Weeks 2–3

    Installation on your infrastructure

  3. Weeks 4–7

    The use case end to end, on your data

  4. Week 8

    Review and decision

Frequently asked questions

Do we need both platforms?

No. Each installs and runs on its own. Together, the Agentic Platform’s agents operate the Data Platform through MCP, under your rules.

Is the software free?

Yes: both platforms are open source, under the Apache 2.0 license. The vendor subscription, per vCPU with no usage-based billing, brings support, security fixes, qualified updates and signed images.

Do we need a Kubernetes cluster?

For production, yes: both platforms install on your Kubernetes or OpenShift, on-premises or with a hosting provider. The Agentic Platform can also be tried on a workstation, with Docker. If the cluster still has to be built, we help you.

Which agents, and which model?

Claude Code, Codex, Gemini CLI or your own agents; and the model you choose: hosted on your premises, served by graal's gateway, or with the provider of your choice. graal speaks MCP, an open protocol.

Is graal SecNumCloud-qualified or HDS-certified?

Those labels qualify hosting offers, not software. graal deploys with a SecNumCloud-qualified or HDS-certified hosting provider, just as it does in your own datacenter.

Does our data leave our infrastructure?

No. The platforms and the data stay with you. If you connect an external model, it only receives what the tools it calls return.

Can it be installed without Internet access?

Yes. Both platforms install from your own image registry; with a model hosted on your premises, your agents work without any Internet access.

Who provides support?

The vendor, as part of the subscription. graal Services cover integration, migration, training and operations.

What if we want to leave?

The code is open, pipeline code is exportable and formats are open: you leave with your work.

Let's see graal on your data