/ technical
Architecture built for enterprise reliability.
Kubernetes-native microservices, InferrexAI native inference, every major API protocol, and deployment modes from managed SaaS to fully air-gapped.
Independently scalable microservices.
Each service handles one responsibility — inference, sync, healing, monitoring, archival — and scales independently. Services scale from zero when idle and burst under load without pre-provisioning.
The architecture is manifest-driven end to end: service definitions, API routes, database schema, and deployment topology are all generated from declarative manifests, which is what makes four very different deployment modes — managed cloud to fully air-gapped — the same platform rather than four forks. When a capability ships, it ships everywhere, because there is one codebase and the deployment mode is configuration, not a branch.
That same discipline is why the platform stays reliable as it grows. A change to how a field is classified, a sync is scheduled, or a schema is versioned propagates through generated code, not hand-edited services — so the seventeen services can't drift out of agreement about what a connection, a mapping, or a tenant is. Every service reads the same shared manifest, and the manifest is the contract.
Seventeen services. One flow.
One codebase, one config flag. Each service does one thing and scales independently — connect, comprehend, sync, heal, govern, over a shared manifest.
API
The public surface: connections, pipelines, sync, plus workspace and access control.
Inference
Points at any API and discovers its schema — no spec required.
InferrexAI
The multi-layer model pipeline that classifies fields and infers what they mean.
Sync
Moves data between systems at the cadence each connection needs, realtime to batch.
Manifest
The shared source of truth every other service reads from.
Self-healing
Detects provider changes and repairs mappings; escalates only when judgement is needed.
Change monitor
Watches every provider's docs, specs and changelogs for changes that matter.
Backup & Recovery
Pre-write snapshots, point-in-time restore, tiered archival, signed deletion certificates.
Retrieval
Fast, governed reads from the golden record.
Version manager
Tracks every schema version over time — the temporal model.
Intelligence
Surfaces waste, gaps and opportunities across your connected data.
Suggestions
Proposes the next useful connection, mapping or automation.
InferrexMCP
Drive everything from your AI IDE over the Model Context Protocol.
The Corpus
The provider-intelligence knowledge graph behind every inference.
Licensing
Entitlements and offline licensing, including sovereign and air-gapped.
CLI sandbox
Safe, isolated execution for InferrexCLI and agent operations.
Every way to read an API.
REST to mainframe, modern to legacy — every major protocol, parsed into one canonical model.
As at 4 September 2026
As at 18 June 2026
As at 4 September 2026
Protocol breadth is where integration platforms quietly draw their real boundary. Most support REST and stop, which rules out the systems enterprises actually struggle with — the payroll provider speaking SOAP, the bank speaking ISO 20022, the supply chain speaking EDIFACT, the core system speaking COBOL. Inferrex parses each of these into the same canonical model as a modern OpenAPI spec, so a mainframe copybook and a GraphQL schema become mappable to each other with no special-case machinery in between. Where no specification exists at all, live probing reads the API's actual behaviour and infers the structure from its responses.
| Protocol | Coverage | Mode |
|---|---|---|
| OpenAPI / Swagger (REST) | REST APIs with published specs | Spec parsing + live probing |
| GraphQL | Introspection-based discovery | Introspection + SDL |
| gRPC / Protobuf | Google Ads, Analytics 4, Twilio | Proto reflection + descriptor sets |
| SOAP / WSDL | Sage, NHS, HMRC, payroll | WSDL parsing + envelope probing |
| OData | Dynamics 365, SharePoint, Azure DevOps | Metadata document parsing |
| AsyncAPI | Webhook and event schemas | Event-schema parsing |
| RAML / AWS Smithy | Legacy and AWS service definitions | Model + descriptor parsing |
| Healthcare — FHIR, HL7 CDA | NHS, clinical and care systems | Resource + template parsing |
| Financial messaging — ISO 20022, ISO 8583 | Payments, banking, card networks | Message-schema parsing |
| EDI — EDIFACT, X12 | Supply chain, trade, healthcare claims | Segment + element directory parsing |
| Bank files — ACH, Fedwire, Metro2, BAI2 | Payment rails, statements, credit reporting | Fixed-format record parsing |
| Mainframe — COBOL copybooks | Legacy core systems | Copybook PIC parsing |
| Live probing | Undocumented APIs | Request probing + response analysis |
InferrexAI. Native inference, everywhere it runs.
Inferrex's own models, trained on API specifications — never customer data — serving every deployment mode, including the ones with no internet at all.
Most fields classify without AI at all — deterministic pattern matching against The Corpus resolves them directly, so InferrexAI is reserved for the genuinely ambiguous fields. When inference does run, it runs on Inferrex's own models: a multi-layer pipeline that classifies fields by business meaning, infers relationships, and proposes cross-system mappings with confidence scores. Your corrections feed back into training, so the platform's comprehension compounds.
- Own models, own hardware — inference runs on models Inferrex trained and serves itself. No third-party model receives your schema or your data.
- Enterprise & Sovereign — inference routes within your own environment. Nothing leaves it.
- Air-gapped — private model serving with bundled weights. Zero internet dependency, full capability.
- Deterministic first — the platform prefers the corpus-backed deterministic answer wherever one exists; AI handles the residue, not the routine.
Where Inferrex runs is your decision, not our limitation.
The real question was never “is my environment compatible?” but “which deployment mode fits my constraints?” Same platform, same capability — you choose the mode that matches your requirements for control, isolation, and residency.
There's a question every infrastructure platform eventually gets asked: what do you support? The honest answer for Inferrex isn't a list of logos or a compatibility matrix — it's that support is a function of how you choose to deploy, not a fixed boundary on what's possible. You're not checking whether you're on the approved list. You're choosing the mode that fits.
Inferrex Cloud
Nothing to configure. Inferrex runs the infrastructure, handles the scaling, manages the upgrades — you connect your systems and it works. The fastest path from nothing to comprehension, with none of the operational weight landing on your team.
Inferrex Enterprise
Dedicated in your VPC. SSO/SAML, private networking, dedicated SLAs, customer-managed keys — managed capability inside your own perimeter.
Inferrex Sovereign
Your cloud, your region, your governance controls — the platform is configured to your environment during implementation, shaped to fit rather than forced into a fixed deployment. The right mode when residency, jurisdiction, or organisational control requirements are non-negotiable.
Inferrex Air-gapped
For environments that can't have an outbound connection at all: your own Kubernetes, fully isolated, no network dependency on the outside world. CPU and GPU both supported — NVIDIA preferred on GPU — so full capability lives inside a perimeter that never has to open.
Cryptographic licence validation, no call-home.
| Component | Options |
|---|---|
| Storage | Azure Blob, S3, GCS, MinIO |
| Queue | NATS JetStream, AWS SQS, cloud-native queues |
| Database | Any PostgreSQL 14+ |
| Encryption | Cloud KMS, AWS KMS, HashiCorp Vault, or offline |
| AI inference | InferrexAI managed serving or private model serving |
API versions change. Inferrex handles the change without touching your live systems.
Tested against snapshots, never your live systems.
Every API you depend on will, eventually, change its version. When it does, you're handed a bad choice. Upgrade now and hope the new version behaves — discovering the breakages in production. Or stay on the version you trust until the provider deprecates it out from under you, at which point you're forced to upgrade anyway, on their timeline, under pressure. Both options share a flaw: you find out what the new version does to your data only after you've committed to it. Inferrex removes that flaw — every version change is tested against your snapshots first, so the upgrade is a decision you make on evidence instead of a switch you flip on faith.
Version Simulation
Run the new API version against your captured snapshots and get a pass rate back — which calls succeed, which fields shift, where the breakage is — without making a single live request. A green pass rate means proceed with confidence. A poor one means you found out in a sandbox, not in an incident.
Parallel-Run
For the changes that need more than a pass rate: run the old and new versions side by side and watch where they diverge — not as an abstract changelog entry, but as a concrete divergence on your own data, while you can still choose not to commit. It turns the cutover from a moment of risk into a comparison you've already studied.
EOL Auto-Upgrade
Versions reach end-of-life whether you're ready or not. Rather than letting a deprecated version sit and rot until the provider switches it off, Inferrex upgrades it automatically at EOL — the deprecation that would have been an emergency becomes a non-event you didn't have to manage.
Enterprise-grade security. UK compliance built in.
Encryption everywhere, your keys, your region — and a platform trained on API specifications, never your data.
Encryption everywhere
AES-256 at rest, TLS 1.3 in transit, mutual TLS between services. Per-customer keys, never shared — on by default in every deployment.
Bring your own keys
Customer-managed encryption via Cloud KMS, AWS KMS, HashiCorp Vault, or fully offline.
Access control
Role-based access, SSO/SAML with your own IdP, per-key API scopes, workspace isolation and team-scoped resources.
Your data, your region
EU by default (London). UK residency available. Sovereign and air-gapped run entirely under your control.
Trained on specs, not your data
InferrexAI models learn from public API specifications, never customer data. The platform reads structure, not record content, unless you explicitly ask.
Right to erasure
GDPR Article 17 with signed deletion certificates. Customer data deleted within 30 days of termination; DSARs supported end to end.
Full audit trail
Every AI decision, sync, healing event and user action is logged and queryable — who, what, when.
Zero-egress option
Sovereign and air-gapped make no external calls, enforced at both the network and application layer, under a signed offline licence with cryptographic, no-call-home validation.
Data protection, by the book.
Built around UK GDPR, the Data Protection Act 2018 and PECR.
| Area | Commitment |
|---|---|
| Roles | Inferrex is your data processor; you stay the controller. We process only on your documented instructions. |
| Breach notification | Within 72 hours of becoming aware. |
| Sub-processors | Published and transparent — 30-day notice and a 14-day objection window before any change. |
| Retention & deletion | Customer data deleted within 30 days of termination, with deletion certificates on request. |
| Data subject rights | Access, rectification, erasure, restriction, portability and objection — supported through the platform. |
| AI | Sovereign and air-gapped use InferrexAI exclusively — no external AI provider ever receives your data. |
The full Terms, DPA and the live sub-processor list are under Legal.
How the platform itself is governed.
Moved here from /govern-protect, which now leads with the five capabilities that pillar is defined by. This is the architecture underneath them — it belongs with the rest of the technical detail rather than in place of the capability names.
Isolation enforced at the database, not in application code.
Tenant-scoped data is protected at the database layer through row-level security, with release checks designed to verify cross-tenant isolation.
Enforcing it in the database rather than in every query means a missed check is a failed release, not a silent leak.
In transit, at rest, and around credentials specifically.
External surfaces use TLS. Stored infrastructure uses platform encryption, while connection credentials are additionally protected and managed through the platform's secrets architecture.
Scoped access, yours to control where the environment demands it.
Workspace and API access is scoped. Identity and deployment requirements can vary by deployment model, including customer-controlled identity in sovereign environments.
Where inference runs, and on what.
The platform's inference architecture is designed around Inferrex-controlled deterministic and model paths, with customer structural metadata and record content treated differently.
Sovereign and air-gapped environments are designed to avoid external inference dependencies — the boundary you chose is not quietly crossed to answer a classification question.
Connect an API in five lines.
The @inferrex/sdk package (InferrexSDK) is available. The shape:
import { Inferrex } from '@inferrex/sdk';
const client = new Inferrex({ apiKey: 'inf_live_xxxx' });
const connection = await client.connections.infer({
url: 'https://api.stripe.com/v1',
auth: { type: 'bearer', token: 'sk_live_xxxx' }
});
await client.connections.approve(connection.id);| Group | Endpoints |
|---|---|
| Connections | POST /v1/connections/infer · POST /v1/connections/:id/approve |
| Pipelines | POST /v1/pipelines · POST /v1/pipelines/:id/dry-run |
| Sync | GET /v1/sync/status · GET /v1/sync/:pipelineId/history |
| Intelligence | GET /v1/intelligence/suggestions · /waste · /gaps |
| Backup & Recovery | POST /v1/archival/:pipelineId/enable · GET /v1/archival/certificates |

