Inferrex

/ technical

Architecture built for enterprise reliability.

Kubernetes-native microservices, InferrexAI native inference, every major API protocol, and deployment modes from managed SaaS to fully air-gapped.

Independently scalable microservices, generated from manifests.

Independently scalable microservices.

Each service handles one responsibility — inference, sync, healing, monitoring, archival — and scales independently. Services scale from zero when idle and burst under load without pre-provisioning.

The architecture is manifest-driven end to end: service definitions, API routes, database schema, and deployment topology are all generated from declarative manifests, which is what makes four very different deployment modes — managed cloud to fully air-gapped — the same platform rather than four forks. When a capability ships, it ships everywhere, because there is one codebase and the deployment mode is configuration, not a branch.

That same discipline is why the platform stays reliable as it grows. A change to how a field is classified, a sync is scheduled, or a schema is versioned propagates through generated code, not hand-edited services — so the seventeen services can't drift out of agreement about what a connection, a mapping, or a tenant is. Every service reads the same shared manifest, and the manifest is the contract.

Seventeen services. One flow.

One codebase, one config flag. Each service does one thing and scales independently — connect, comprehend, sync, heal, govern, over a shared manifest.

API

The public surface: connections, pipelines, sync, plus workspace and access control.

Inference

Points at any API and discovers its schema — no spec required.

InferrexAI

The multi-layer model pipeline that classifies fields and infers what they mean.

Sync

Moves data between systems at the cadence each connection needs, realtime to batch.

Manifest

The shared source of truth every other service reads from.

Self-healing

Detects provider changes and repairs mappings; escalates only when judgement is needed.

Change monitor

Watches every provider's docs, specs and changelogs for changes that matter.

Backup & Recovery

Pre-write snapshots, point-in-time restore, tiered archival, signed deletion certificates.

Retrieval

Fast, governed reads from the golden record.

Version manager

Tracks every schema version over time — the temporal model.

Intelligence

Surfaces waste, gaps and opportunities across your connected data.

Suggestions

Proposes the next useful connection, mapping or automation.

InferrexMCP

Drive everything from your AI IDE over the Model Context Protocol.

The Corpus

The provider-intelligence knowledge graph behind every inference.

Licensing

Entitlements and offline licensing, including sovereign and air-gapped.

CLI sandbox

Safe, isolated execution for InferrexCLI and agent operations.

Every way to read an API.

REST to mainframe, modern to legacy — every major protocol, parsed into one canonical model.

25
API formats read

As at 4 September 2026

4,225
Systems mapped

As at 18 June 2026

21.1 million
Integration pairs

As at 4 September 2026

Protocol breadth is where integration platforms quietly draw their real boundary. Most support REST and stop, which rules out the systems enterprises actually struggle with — the payroll provider speaking SOAP, the bank speaking ISO 20022, the supply chain speaking EDIFACT, the core system speaking COBOL. Inferrex parses each of these into the same canonical model as a modern OpenAPI spec, so a mainframe copybook and a GraphQL schema become mappable to each other with no special-case machinery in between. Where no specification exists at all, live probing reads the API's actual behaviour and infers the structure from its responses.

Comparison
ProtocolCoverageMode
OpenAPI / Swagger (REST)REST APIs with published specsSpec parsing + live probing
GraphQLIntrospection-based discoveryIntrospection + SDL
gRPC / ProtobufGoogle Ads, Analytics 4, TwilioProto reflection + descriptor sets
SOAP / WSDLSage, NHS, HMRC, payrollWSDL parsing + envelope probing
ODataDynamics 365, SharePoint, Azure DevOpsMetadata document parsing
AsyncAPIWebhook and event schemasEvent-schema parsing
RAML / AWS SmithyLegacy and AWS service definitionsModel + descriptor parsing
Healthcare — FHIR, HL7 CDANHS, clinical and care systemsResource + template parsing
Financial messaging — ISO 20022, ISO 8583Payments, banking, card networksMessage-schema parsing
EDI — EDIFACT, X12Supply chain, trade, healthcare claimsSegment + element directory parsing
Bank files — ACH, Fedwire, Metro2, BAI2Payment rails, statements, credit reportingFixed-format record parsing
Mainframe — COBOL copybooksLegacy core systemsCopybook PIC parsing
Live probingUndocumented APIsRequest probing + response analysis

InferrexAI. Native inference, everywhere it runs.

Inferrex's own models, trained on API specifications — never customer data — serving every deployment mode, including the ones with no internet at all.

Most fields classify without AI at all — deterministic pattern matching against The Corpus resolves them directly, so InferrexAI is reserved for the genuinely ambiguous fields. When inference does run, it runs on Inferrex's own models: a multi-layer pipeline that classifies fields by business meaning, infers relationships, and proposes cross-system mappings with confidence scores. Your corrections feed back into training, so the platform's comprehension compounds.

  • Own models, own hardware — inference runs on models Inferrex trained and serves itself. No third-party model receives your schema or your data.
  • Enterprise & Sovereign — inference routes within your own environment. Nothing leaves it.
  • Air-gapped — private model serving with bundled weights. Zero internet dependency, full capability.
  • Deterministic first — the platform prefers the corpus-backed deterministic answer wherever one exists; AI handles the residue, not the routine.

Where Inferrex runs is your decision, not our limitation.

The real question was never “is my environment compatible?” but “which deployment mode fits my constraints?” Same platform, same capability — you choose the mode that matches your requirements for control, isolation, and residency.

There's a question every infrastructure platform eventually gets asked: what do you support? The honest answer for Inferrex isn't a list of logos or a compatibility matrix — it's that support is a function of how you choose to deploy, not a fixed boundary on what's possible. You're not checking whether you're on the approved list. You're choosing the mode that fits.

Inferrex Cloud

Nothing to configure. Inferrex runs the infrastructure, handles the scaling, manages the upgrades — you connect your systems and it works. The fastest path from nothing to comprehension, with none of the operational weight landing on your team.

Inferrex Enterprise

Dedicated in your VPC. SSO/SAML, private networking, dedicated SLAs, customer-managed keys — managed capability inside your own perimeter.

Inferrex Sovereign

Your cloud, your region, your governance controls — the platform is configured to your environment during implementation, shaped to fit rather than forced into a fixed deployment. The right mode when residency, jurisdiction, or organisational control requirements are non-negotiable.

Inferrex Air-gapped

For environments that can't have an outbound connection at all: your own Kubernetes, fully isolated, no network dependency on the outside world. CPU and GPU both supported — NVIDIA preferred on GPU — so full capability lives inside a perimeter that never has to open.

Cryptographic licence validation, no call-home.

In an air-gapped deployment the platform still has to prove it's licensed — but it can't phone home to do it, because there's no home to phone. Inferrex validates its licence cryptographically, on-site, with nothing leaving the perimeter. The proof is mathematical rather than networked. Sovereignty that holds even when the network genuinely does not exist — no exception carved out for licensing, no quiet outbound connection you have to trust.
ComponentOptions
StorageAzure Blob, S3, GCS, MinIO
QueueNATS JetStream, AWS SQS, cloud-native queues
DatabaseAny PostgreSQL 14+
EncryptionCloud KMS, AWS KMS, HashiCorp Vault, or offline
AI inferenceInferrexAI managed serving or private model serving

API versions change. Inferrex handles the change without touching your live systems.

Tested against snapshots, never your live systems.

Every API you depend on will, eventually, change its version. When it does, you're handed a bad choice. Upgrade now and hope the new version behaves — discovering the breakages in production. Or stay on the version you trust until the provider deprecates it out from under you, at which point you're forced to upgrade anyway, on their timeline, under pressure. Both options share a flaw: you find out what the new version does to your data only after you've committed to it. Inferrex removes that flaw — every version change is tested against your snapshots first, so the upgrade is a decision you make on evidence instead of a switch you flip on faith.

Version Simulation

Run the new API version against your captured snapshots and get a pass rate back — which calls succeed, which fields shift, where the breakage is — without making a single live request. A green pass rate means proceed with confidence. A poor one means you found out in a sandbox, not in an incident.

Parallel-Run

For the changes that need more than a pass rate: run the old and new versions side by side and watch where they diverge — not as an abstract changelog entry, but as a concrete divergence on your own data, while you can still choose not to commit. It turns the cutover from a moment of risk into a comparison you've already studied.

EOL Auto-Upgrade

Versions reach end-of-life whether you're ready or not. Rather than letting a deprecated version sit and rot until the provider switches it off, Inferrex upgrades it automatically at EOL — the deprecation that would have been an emergency becomes a non-event you didn't have to manage.

Enterprise-grade security. UK compliance built in.

Encryption everywhere, your keys, your region — and a platform trained on API specifications, never your data.

Encryption everywhere

AES-256 at rest, TLS 1.3 in transit, mutual TLS between services. Per-customer keys, never shared — on by default in every deployment.

Bring your own keys

Customer-managed encryption via Cloud KMS, AWS KMS, HashiCorp Vault, or fully offline.

Access control

Role-based access, SSO/SAML with your own IdP, per-key API scopes, workspace isolation and team-scoped resources.

Your data, your region

EU by default (London). UK residency available. Sovereign and air-gapped run entirely under your control.

Trained on specs, not your data

InferrexAI models learn from public API specifications, never customer data. The platform reads structure, not record content, unless you explicitly ask.

Right to erasure

GDPR Article 17 with signed deletion certificates. Customer data deleted within 30 days of termination; DSARs supported end to end.

Full audit trail

Every AI decision, sync, healing event and user action is logged and queryable — who, what, when.

Zero-egress option

Sovereign and air-gapped make no external calls, enforced at both the network and application layer, under a signed offline licence with cryptographic, no-call-home validation.

Data protection, by the book.

Built around UK GDPR, the Data Protection Act 2018 and PECR.

AreaCommitment
RolesInferrex is your data processor; you stay the controller. We process only on your documented instructions.
Breach notificationWithin 72 hours of becoming aware.
Sub-processorsPublished and transparent — 30-day notice and a 14-day objection window before any change.
Retention & deletionCustomer data deleted within 30 days of termination, with deletion certificates on request.
Data subject rightsAccess, rectification, erasure, restriction, portability and objection — supported through the platform.
AISovereign and air-gapped use InferrexAI exclusively — no external AI provider ever receives your data.

The full Terms, DPA and the live sub-processor list are under Legal.

How the platform itself is governed.

Moved here from /govern-protect, which now leads with the five capabilities that pillar is defined by. This is the architecture underneath them — it belongs with the rest of the technical detail rather than in place of the capability names.

Isolation enforced at the database, not in application code.

Tenant-scoped data is protected at the database layer through row-level security, with release checks designed to verify cross-tenant isolation.

Enforcing it in the database rather than in every query means a missed check is a failed release, not a silent leak.

In transit, at rest, and around credentials specifically.

External surfaces use TLS. Stored infrastructure uses platform encryption, while connection credentials are additionally protected and managed through the platform's secrets architecture.

Scoped access, yours to control where the environment demands it.

Workspace and API access is scoped. Identity and deployment requirements can vary by deployment model, including customer-controlled identity in sovereign environments.

Where inference runs, and on what.

The platform's inference architecture is designed around Inferrex-controlled deterministic and model paths, with customer structural metadata and record content treated differently.

Sovereign and air-gapped environments are designed to avoid external inference dependencies — the boundary you chose is not quietly crossed to answer a classification question.

Connect an API in five lines.

The @inferrex/sdk package (InferrexSDK) is available. The shape:

import { Inferrex } from '@inferrex/sdk';

const client = new Inferrex({ apiKey: 'inf_live_xxxx' });

const connection = await client.connections.infer({
  url: 'https://api.stripe.com/v1',
  auth: { type: 'bearer', token: 'sk_live_xxxx' }
});

await client.connections.approve(connection.id);
GroupEndpoints
ConnectionsPOST /v1/connections/infer · POST /v1/connections/:id/approve
PipelinesPOST /v1/pipelines · POST /v1/pipelines/:id/dry-run
SyncGET /v1/sync/status · GET /v1/sync/:pipelineId/history
IntelligenceGET /v1/intelligence/suggestions · /waste · /gaps
Backup & RecoveryPOST /v1/archival/:pipelineId/enable · GET /v1/archival/certificates