SOVEREIGN INDUSTRIAL AI

The sovereign AI copilot for industrial enterprise operations.

On-premise. Department-isolated. ERP-native. Your data never leaves your network — and your people get answers in seconds, not days.

on.it industrial AI platform in operation
MARKET CONTEXT

The window is open. The demand is here.

The industrial AI copilot market reached $3.6 billion in 2025 and is on track for $48 billion by 2036. Manufacturing enterprises are under urgent pressure to deploy AI at the operational level — without sending their data to the cloud.

$48B

Industrial AI Copilot market by 2036
26% CAGR — fastest-growing enterprise AI segment

61%

of European CIOs increasing reliance on local AI providers in 2026
Gartner 2025

0%

of your data leaves your network — on.it runs entirely on your own servers, by architecture, not by policy

Cloud copilots (Microsoft, SAP Joule, Cognite) require your operational data to leave your facility. on.it runs entirely on your own servers. Every query, every response, every insight stays inside your network — by architecture, not by policy.

PLATFORM ARCHITECTURE

Five layers. One sovereign stack.

on.it is built as a complete on-premise platform — from network perimeter to AI inference engine. Every layer is isolated, hardened, and under your control.

Perimeter Security

Network Gateway

Single entry point · Traffic encryption · Intelligent routing · Automatic attack blocking

Identity & Access

Federated Identity Provider

Enterprise SSO (Microsoft, Google, directory) · SAML 2.0 / OIDC / OAuth2 · MFA · Continuous verification · Zero new accounts

Applications

Web Portal + Workflow Automation

Customisable portal · Event-driven triggers · Workflow automation · No direct data access from the application layer

Content & Data

API-First CMS

Composable modules · Field-level access control · Data isolation per company · RLS enforced between departments

Infrastructure — Not reachable from internet

Sovereign Compute Layer

Database · Object storage · AI inference engine — all internal, no external access. Your data never leaves your network.

Core Principle
"What you build today does not become obsolete when the underlying technology changes."
The abstraction layer means users see data and actions — not APIs or database tables. Changing the underlying ERP has zero impact on users or workflows.
DEPARTMENT ISOLATION

Every department sees exactly what it should. Nothing more.

Row-Level Security (RLS) is enforced at the query level — not the presentation level. The AI model cannot bypass the filter. Data exists in the platform but is never partially exposed.

Department Data in scope Orders & Prices Purchase Costs Production Data Stock Quantities
Sales Orders, list prices, discounts, customer history, commercial tiers ✓ Full access ✗ Blocked ✗ Blocked ✗ Blocked
Production Work orders, BOM, material requirements, progress, schedules ✗ Blocked ✗ Blocked ✓ Full access ✓ Quantities
Purchasing Purchase orders, supplier data, contracts, expiry dates ✗ Blocked ✓ Full access ✓ Aggregated ✓ Quantities
Warehouse Stock levels, movements, locations, batches — quantities only ✗ Blocked ✗ Blocked ✗ Blocked ✓ Full access
Industrial Accounting Production costs, purchase prices, margins ✓ Full access ✓ Full access ✓ Full access ✓ Full access
Management Global KPIs, aggregated cross-dept data only ✓ Aggregated ✓ Aggregated ✓ Aggregated ✓ Aggregated
PLATFORM IN ACTION

Real queries. Real answers. All on-premise.

These are the conversations on.it enables every day across manufacturing operations — from shop floor to C-suite.

Sales Operator "Rossi SpA is requesting a 15% discount on the quote for 200 units of DN200 Flange. Can I grant it?"
Rossi SpA — average discount last 12 months: 12% (8 orders)
Current list price DN200 Flange: €48.00 · Requested discount (15%): −€7.20
Proposed unit price: €40.80 · Quote value (200 units): €8,160

Max authorised discount for your commercial tier: 13%

The 15% request exceeds your tier limit. Recommended: contact the sales manager for approval, or propose 13% at equivalent perceived value through bundle or payment terms.
Production Operator "Give me the status of all open work orders this week. Which ones are delayed and why?"
5 WOs open · 2 delayed · 1 at risk · 1 blocked — materials

WO-089 Valve A-22 · Assembly · 65% · Blocked — High
WO-090 Flange DN200 · Turning · 90% · At risk — High
WO-091 Fitting DN50 · Testing · 100% · 1d late — Medium
WO-092 Flex Pipe 3/4 · Milling · 40% · On time
WO-093 Adapter M-10 · Welding · 55% · On time

WO-089 — Valve A-22: blocked — EPDM O-Ring not yet received from Plastika Srl (PO-448 unconfirmed).
→ Recommended: contact Plastika Srl to verify shipment, or identify alternative supplier immediately.
Warehouse Operator "What is the current value of our stock?"
Request blocked by RLS filter — data not accessible in this context.

I do not have access to purchase prices. The economic value of stock falls within Industrial Accounting scope. The Warehouse context sees item quantities, not their prices.

✓ I can help you with:
→ Complete stock report per item (quantity, location, batch)
→ Inbound/outbound movements per period
→ List of slow-moving items (no movement in last 90 days)
→ For stock economic value: contact Industrial Accounting.
NATIVE INTEGRATION

Connects to any enterprise system. Disrupts none of them.

on.it's abstraction layer sits above your existing ERP stack. Users see a unified interface. The underlying systems are never exposed — and never need to change.

IBM AS/400 · iSeries

Native connector — serving the industrial base across Europe and globally. No middleware required.

SAP ECC · S/4HANA

RFC/BAPI · OData · IDoc — full ERP integration across all SAP deployment models.

Oracle EBS · Fusion

REST API · JDBC · real-time data access without disruption to existing workflows.

Microsoft Dynamics 365

Dataverse API · Power Platform connectors — full integration with existing Microsoft investments.

Infor M3 · LN · CloudSuite

XML API · REST — manufacturing-native integration for Infor-based industrial operations.

Any REST / SOAP API

Open connector — any system with a documented API. No proprietary lock-in required.

Native Compatibility
Built for the IBM stack.

on.it connects natively to IBM AS/400 and iSeries environments — the backbone of industrial operations across Europe and beyond. Manufacturing companies with decades of structured ERP data can deploy on.it without disrupting existing infrastructure. The AI layer sits above what already works.

Zero disruption
on.it does not replace AS/400 or iSeries. It extends their value — adding a sovereign AI intelligence layer on top of infrastructure that already runs your business.
Decades of data, finally actionable
Structured ERP data built up over years becomes a real-time operational intelligence asset — accessible to every department through natural language, secured by RLS.
COMPLIANCE & CERTIFICATIONS

Architected for regulated industries.

ISO 27001:2022 certification covers GDPR, NIS2, and EU AI Act obligations by design. Sovereign deployment means minimal risk classification under EU regulatory frameworks.

GDPR

Regulation (EU) 2016/679

Privacy by design and by default. Data residency enforced on-premise. Field-level access control. Complete audit trail. Immediate revocation on employee departure. No cross-border data transfer.

NIS2

Directive (EU) 2022/2555

ISO 27001 Annex A controls mapped directly to NIS2 Article 21 requirements. Cybersecurity risk management, incident reporting obligations, BCM and disaster recovery covered by architecture.

EU AI Act

Regulation (EU) 2024/1689

On-premise sovereign deployment achieves minimal risk classification. AI risk management system, data governance, technical documentation, and post-market monitoring all covered under ISO 27001:2022 framework.

Ready to Deploy

See on.it in your environment.

We connect to your existing ERP stack and run a live demonstration with your own data structure — no generic demo, no cloud setup required.