AI built with your team, owned by you

ibl.ai's Forward-Deployed Engineers embed with your team to connect HRIS, LMS, CRM, ERP, identity, storage, and knowledge-base systems into a secure, policy-aware memory layer built on the Model Context Protocol (MCP). That memory becomes the backbone for AI agents — employee coaches, L&D assistants, and compliance monitors — running privately in your infrastructure.

This is professional services, billed by the hour (ultra-competitive rates), with clear milestones and artifacts you own.

Start here: where do your users, content, and records already live?

List every system that holds something an agent will need to read. This inventory is the foundation — bring in as many root systems as you want, and each one gets its own connector in the next step.

Put a thin layer on top over MCP — not a complex integration project

Our open-source Ontology builds these connectors — databases (PeopleSoft, Oracle, Snowflake) and REST systems (Canvas, Salesforce, ServiceNow, Workday) alike — and handles the toolbox, schema mapping, and sync. Add as many as you have systems.

Many MCP servers → one unified interface to the outside world

The broker authenticates each request, checks RBAC (deny-by-default), routes the tool call to the right MCP server, filters the response, and logs it. This is what AI Data Unification delivers end to end.

Markdown skill files written by domain experts, not engineers

Each system gets many skills: “advance an admissions application,” “onboard a new employee,” “advance a sales deal,” “open an IT ticket,” “check a claim status.” Bring in as many skills per system as the work requires.

Skills + prompts + instructions + memory

Add as many agents as you want. Each one bundles a set of skills, an instruction prompt, and persistent memory, and inherits the same role-scoped access enforced by the broker.

Your servers, sandboxed — data privacy, code security, no vendor lock-in

Each agent runs in its own sandbox with isolated execution, resource limits, endpoint allowlisting, credential injection, and audit logging — the same security model as the rest of the platform.

Edit and ship without waiting on an engineer or a deployment

The web layer exposes editing and running of skills, agents, and data sources directly in the browser, governed by the same roles and permissions as every layer below it.

A dedicated app per team, embeddable anywhere (LTI & more)

This is what we use Agentic Vibe for: describe the app and assemble it from your existing agents and skills. Bring in as many applications at this layer as you want.

ibl.ai-hosted: we manage the infrastructure. Fastest time to launch, no infrastructure overhead for your IT team, fully managed updates and maintenance; ideal for organizations that want speed.

Customer-hosted: deployed in your environment. Full GitHub repository with the complete platform code, pre-built Docker images ready to deploy, your security perimeter and your control; ideal for regulated industries and data sovereignty.

Both options deliver the same platform: a runtime for creating, managing, deploying and using AI agents across web, mobile, API and MCP. Platform is live, and agents are accessible from day one.

1. We deliver the platform: the full GitHub repository, the complete multitenant platform code, and pre-built Docker images, tested and versioned.

2. Joint development environment: we work alongside your team in a dev or staging environment, where agent configuration, system integration, testing and training happen together.

3. Production, your way: your team can promote to production independently, on your schedule and through your processes, or we manage production for you, as we run production environments for many leading organizations. Access to your production data is never a prerequisite; ibl.ai-hosted deployments include full production management by our team.

Self-serve: your teams build independently. Create agents through the platform UI or API, connect to your data sources directly, leverage the institutional knowledge your team already has, with full API coverage for programmatic agent management.

Collaborative: we work with you to build agents connected to specific data sources, develop MCP servers and custom data integrations, configure SSO and enterprise deployment standards, and build software that makes agents more capable. Agents are live and working, with visible results from day one.

Single sign-on over SAML or OIDC. Data sources: your existing databases and APIs. MCP servers: custom data integrations. Existing tools: CRM, HRIS, ERP, ticketing, LMS, SIS and more.

The platform adapts to your stack; your workflows do not need to change to support agents. Integrated and operational, continuous improvement begins.

Building specific agents: we develop purpose-built agents for your use cases, connected to your data and tuned for your workflows.

Extending platform capabilities: we build new features and integrations that make your agents more powerful, with additional data sources, richer tooling and new interfaces.

Ongoing communication: dedicated channels for collaboration, support and strategic alignment as your needs evolve.

Lead with tangible results: start with concrete agents that can be demonstrated from day one, so stakeholders see working agents immediately, not a black box for months.

Start with specific use cases: define concrete agents early. If the project definition is too broad without specific agents to show, stakeholder buy-in stalls while time goes into invisible infrastructure work.

Adapt to the existing stack: the platform integrates with your current tools and data sources, so your teams do not need to change their workflows to accommodate agents.

Empower your engineers: your team has the institutional knowledge. When your engineers can build agents programmatically and connect them to internal data sources, the value compounds.

The Model Context Protocol is an open standard — originally developed by Anthropic — that defines how AI models connect to external data sources, tools, and services. MCP provides a universal interface between AI agents and your enterprise systems, replacing brittle custom integrations with standardized, secure connectors.

Think of MCP as USB-C for AI: one protocol, every system. Instead of building a custom integration for each HRIS, LMS, or CRM, MCP gives agents a single, consistent way to read data, call tools, and respect permissions across your entire enterprise stack.

Enterprise IT teams maintain dozens of systems — Workday, SuccessFactors, Cornerstone, Salesforce, SharePoint, and more. Traditional integration approaches require point-to-point connectors that break with every vendor update. MCP eliminates this fragility by providing a protocol-level contract between AI agents and data sources.

With MCP, your organization gets portable agents that work across any LLM provider (OpenAI, Anthropic, Google, Meta, or local models), interchangeable connectors that can be swapped without rewriting agent logic, and built-in security boundaries where every data access goes through policy-aware middleware with SOC 2/SOX/HIPAA-grade controls.

Every ibl.ai deployment uses MCP as the core integration protocol. Our Forward-Deployed Engineers build MCP servers for each enterprise system — HRIS, LMS, CRM, ERP, identity providers, and document stores. These MCP servers expose structured tools and resources that agents can discover and invoke at runtime.

The result is a composable agent architecture: an employee coaching agent can query role history from Workday, fetch training completions from Cornerstone, check compliance deadlines, and retrieve competency frameworks — all through MCP — without any custom glue code between systems.

Every MCP request carries authentication context — who is asking, what role they hold, and what authorization has been granted. Our MCP middleware enforces field-level permissions before data ever reaches the agent.

An employee asking about their own training sees their records; a manager querying the same system sees their team; an L&D admin sees department analytics. Same MCP server, different views.

MCP responses pass through a policy engine that redacts sensitive fields based on configurable rules. Social security numbers, compensation details, and health information are masked or excluded from agent context unless explicitly authorized.

Every redaction decision is logged for audit.

Every MCP tool invocation is logged with timestamp, requesting agent, authenticated user, data accessed, and response summary.

These audit trails support SOC 2/SOX/HIPAA compliance reviews, internal security audits, and incident response. Logs are stored in your infrastructure and retained per your organizational policy.

MCP servers run in isolated containers within your VPC or on-premises infrastructure. No enterprise data leaves your environment.

Agents interact with MCP servers over internal networks with mTLS encryption. External LLM providers receive only the agent's synthesized prompts — never raw employee data.

Inventory: HRIS (e.g., Workday, SuccessFactors, BambooHR), LMS (Cornerstone, Docebo, Absorb), CRM (Salesforce, HubSpot), ERP/Finance (SAP, Oracle, NetSuite), Identity (Entra/Okta/Google), Storage (SharePoint/OneDrive/S3/GCS).

Schemas & Contracts: employee profiles, training completions, certifications, competency frameworks, compliance deadlines, knowledge-base metadata. Policy & Governance: PII fields, role scopes, retention rules, redaction maps, authorization flows.

We build production-grade MCP servers for every enterprise system in your stack. Each server exposes typed tools and resources following the MCP specification, with built-in schema validation, error handling, rate limiting, and observability.

Servers are containerized and deployed via Terraform or Kubernetes manifests you own.

MCP-based Connectors: secure adapters that normalize read/write paths across systems. Per-Employee Memory Graph: knowledge graph + vector index for contextual retrieval (training content, competencies, compliance deadlines, career goals).

Guardrails Engine: RBAC, field-level permissions, PII masking, authorization receipts, audit trails. Sync & Freshness: event bus/CDC, backfills, idempotent jobs, conflict resolution, replay.

Employee Coach: citable Q&A grounded in training content, policies, and competency frameworks via MCP. L&D Assistant: learning paths, skills-gap analysis, compliance tracking, program ROI reporting.

Compliance Monitor: policy lookups, certification status, audit roll-ups, "what's changed?" digests. Model Hub: OpenAI, Gemini, Anthropic, Llama, or local/NPU — hot-swappable per policy/cost.

We embed with your teams to map how work actually flows—not how org charts say it should. Every handoff, approval step, data lookup, and decision point is documented.

This reveals automation opportunities that generic AI tools miss.

We identify where staff spend time on repetitive, rule-based tasks that agents can handle.

Common findings: answering the same onboarding questions, manual data entry across HRIS and ERP, routing compliance requests, and generating routine L&D reports.

Each potential automation is scored on impact (time saved, error reduction), feasibility (data availability, system access), and risk (sensitivity, SOC 2/SOX/HIPAA compliance requirements).

High-impact, low-risk workflows deploy first.

We plan deployment in phases—starting with internal-facing agents that assist L&D and HR teams, then expanding to employee-facing and customer-facing agents as confidence builds.

Each phase has defined success criteria before proceeding.

Your knowledge base is architected with strict read/write separation. Agents that answer questions read from curated, validated knowledge stores. Agents that update knowledge write through approval workflows with human review.

This separation prevents hallucinated content from contaminating your enterprise knowledge.

We work with your subject-matter experts to catalog and ingest enterprise knowledge—SOPs, compliance manuals, training materials, product documentation, and institutional decisions.

Each knowledge source is tagged with provenance, freshness dates, and authority levels.

Knowledge bases are version-controlled like code. Every update is tracked, reversible, and auditable.

When policies change—new SOX controls, updated HIPAA procedures, revised compliance requirements—knowledge updates flow through your existing governance process before agents surface them.

Agents retrieve from multiple knowledge stores simultaneously—your LMS content, HR policies in Workday/SuccessFactors, IT documentation, and departmental procedures—ranked by relevance and authority.

No single point of knowledge failure.

Each agent is designed like a new hire with a specific job description. It has defined responsibilities, access to specific systems, knowledge boundaries, and escalation protocols.

An onboarding agent knows onboarding workflows. A compliance agent knows regulatory requirements. They do not bleed into each other's domains.

Agents are equipped with discrete skills—query the HRIS, draft a communication, generate a compliance report, schedule a training, look up a policy.

Skills are composable: agents chain them to handle multi-step workflows that previously required multiple people and manual handoffs.

Every agent knows its limits. When a question falls outside its defined competence, it escalates to the right human—not a generic support queue, but the specific person or team responsible.

Escalation paths are configured per role, per department, per sensitivity level.

Just like human hires, agents get reviewed. We build evaluation frameworks that measure accuracy, response quality, escalation appropriateness, and employee satisfaction.

Underperforming agents get retrained or restructured.

AI Data Unification connects Epic, Cerner, Workday, ServiceNow, Salesforce Health Cloud, and data warehouses into a single ontology — a structured representation of your organization that agents can reason over.

It has two layers: a semantic layer (the nouns — entities, attributes, relationships) and an operational layer (the verbs — actions, functions, permissions). Together they become the single source of truth every agent reads from.

Model an entity once and the tenth agent costs a fraction of the first, because it inherits the same definitions, the same data, and the same governance.

The implementation is open source at github.com/iblai/ontology — MIT-licensed, Python 3.11+, 163 passing tests. ibl.ai is family-owned and operated from New York, NY: a long-term partner, not a vendor that ships a license and disappears.

Entity types model the real-world objects in your organization — patients, encounters, providers, claims, and departments. Attributes capture their characteristics, and relationships define how they connect. A patient has an encounter; an encounter involves a provider; a referral is an action with rules.

This is the shared vocabulary your domain experts already use, made machine-readable so agents reason over the same reality your people do.

Actions define the permissible changes an agent can make. Functions encode logic. Permissions govern who — human or agent — can do what.

Agents inherit the same permissions as the users they serve, so they can only act within your existing rules. Every action is captured as data, so audit trails are built in, not bolted on.

Databases connect through the Google MCP Toolbox; REST-based systems connect through custom MCP servers, defined in tools.yaml. For hospitals, payers, and life-sciences organizations, that means Epic, Cerner, Workday, ServiceNow, Salesforce Health Cloud, and data warehouses.

Source credentials never leave your network. Each inbound connector has isolated credential scope, with secrets encrypted at rest.

Data is synced into three layers: text memories in Markdown, a Postgres cache, and vector embeddings for semantic search.

The unified graph stays fresh on a schedule you control.

The unified layer exposes itself as a single MCP server over HTTPS, behind your firewall and identity provider.

Any authorized runtime — ibl.ai, Claude, Cursor, or your own apps — connects to it, and results are scoped to the caller's identity.

Version 1 is read-only by design. Before provisioning, a seven-test safety suite verifies that every write attempt is denied; if any write succeeds, provisioning halts and emits remediation SQL.

Agents can read your systems — they cannot mutate them.

Foundations: how AI agents work (retrieval, citations, guardrails), data privacy, and responsible enterprise use. Workforce Patterns: onboarding coaches, compliance training, skills-gap analysis, and performance support workflows.

Toolkits: prompt frameworks, "do/don't" libraries, employee-facing guidelines, and governance templates. Hands-On Labs: build a training coach, configure knowledge bases from Workday/SuccessFactors data, test citations, and set guardrails.

Program Makeovers: co-design onboarding sequences, compliance modules, and AI-supported development plans. Industry-Specific Clinics: sales enablement, technical certification prep, leadership development, and customer service training.

Prompt & Policy Reviews: refine prompts, set boundaries for SOC 2/SOX/HIPAA-sensitive content, and add transparency language.

SOC 2/SOX/HIPAA-aware workflows; dataset scoping and role-based access. Data governance: PII handling, sensitive content boundaries, and audit trail requirements.

Accessibility by Design: WCAG practices, captioning, alt text, and inclusive prompt patterns for diverse workforce.

We actively monitor OpenClaw's security advisories and apply patches before they reach your production environment.

Our team tracks CVEs, validates fixes, and manages updates on a schedule aligned with your change management process.

Deploy agents with granular permissions tied to your identity provider. Employee agents access different data than manager agents.

Compliance agents have different capabilities than coaching agents. All enforced at the infrastructure level.

Every agent action, tool invocation, and data access is logged to your SIEM or logging infrastructure.

SOC 2/SOX/HIPAA-compliant by design, with configurable retention policies and export formats for compliance review.

Agents run in isolated network segments with strict egress controls. Employee data never leaves your perimeter.

Integration with HR systems uses mTLS and service mesh architectures.