Questions

The questions you are probably about to ask.

Twenty-two of them, in the order they tend to arrive: what Jean is, whether an on-premise LLM can match a frontier model, what you end up owning, how its answers are checked, where it runs, and how a deployment starts. Anything missing is a fair question to send us.

What Jean is

The short version, and what separates it from the two things it gets compared to.

Jean is a sovereign AI operating system hosted on your own infrastructure. It connects to the systems your company already uses, builds an ontology of how your business actually works, answers questions from live data with the sources attached, and runs the repeatable work as governed workflows. Everything it accumulates stays in your environment: the ontology, the trained mates, the workflows and the audit ledger.

A dashboard shows what happened and leaves the interpretation to you. A chat wrapper answers quickly with nothing checking it. Jean reasons across your systems, grounds each answer in the records it retrieved, scores its own confidence against Synthia, passes every request through the Governance Gateway, and writes the whole exchange to a ledger. It is a system you own rather than a reporting layer or an API wrapper.

Fintech and regulated mid-market enterprises of roughly 200 to 5,000 people, where AI is a strategic decision rather than a departmental tool. The people who buy it are usually CTOs, CIOs and chief risk officers, because they are the ones accountable for what the company's AI does.

In the sense that matters, yes. Palantir sells a data operating system to governments and the largest enterprises, with a services engagement to match. Jean is built for fintech and regulated mid-market enterprises of 200 to 5,000 people: it deploys inside your own perimeter in weeks, the ontology, the trained models and the workflows become your property and a capital asset under IAS 38, and the price is set for a company that does not have a forward-deployed engineering budget.

Enterprise AI orchestration is the layer that decides which model handles which request, with which data, under which rules, and records the decision. In Jean that layer is model-independent. Every request passes the Governance Gateway first, then Simon picks the model your classification allows: an internal small model, a sovereign model inside your perimeter, or a frontier model where your policy permits it, with sensitive entities masked. Company, department and individual limits can only narrow the choice, and the reason for each routing decision is written to the ledger. That is AI model orchestration you set and can audit, rather than one vendor's model behind every answer.

They solve different problems. DataRobot is a platform for data science teams to build, deploy and monitor machine learning models, and it can run on your own infrastructure. Jean is an on-premise AI platform for the whole company: it connects to the systems you already use, builds an ontology of how your business works, answers questions from live data with the sources attached, and passes every request through a Governance Gateway that writes to a ledger you own. If you need a workbench for your data scientists, DataRobot is built for that. If you need AI the whole company can use and your risk committee can audit, that is what Jean is for.

No. Jean removes latency and assembly work: finding the numbers, reconciling them, writing the first draft, noticing the thing nobody noticed. The judgement and the accountability stay where they are. Any workflow that touches a customer, a contract or the books still stops for a named human.

The ten parts of Jean, one at a time

Ownership and sovereignty

The part that decides whether three years of AI use leaves you with an asset or a subscription.

It means the intelligence your company accumulates belongs to your company: your data, your ontology, your trained models, your workflows and your record of what happened, all inside an environment you control. It is not a hosting choice. The test is what you still have if your vendor changes their pricing, their terms or their model tomorrow.

The part that compounds. Every question answered and every workflow confirmed makes the ontology and the trained mates more specific to your company, and because those artefacts sit in your storage they are an asset you hold, structured with IAS 38 in mind, rather than an expense that leaves nothing behind.

The knowledge graph, the trained mates, the workflows, the connector configuration and the audit ledger. All of it is built inside your environment from the first day of the pilot, so there is no handover at the end and nothing to migrate. What our contract buys after production is support and releases, not access to your own intelligence.

Jean is containerised and runs on AWS, Google Cloud, Azure or hardware in your own building. Frontier models stay in use by design, chosen per task by the router and reached through a gateway you control. We will not claim zero external dependency, because that claim is not true. What we do claim is that changing model is a routing decision rather than a rebuild.

What sovereign AI actually means

Accuracy, evidence and audit

How an answer is produced, how it is checked, and what is left behind for the people who have to sign it off.

The question is resolved against your ontology, the relevant records are retrieved from the systems they live in, the router picks a model for that task, and the answer comes back with its sources, its reasoning and a confidence score. Request, policy verdict, model call, sources cited and any human approval all land in the ledger as it happens.

For the work a company actually asks of it, yes, and often better. Most enterprise questions are classification, extraction, drafting inside a known template and answering from retrieved context. Small language models (SLMs), hierarchical reasoning models (HRMs) and tiny recursive models (TRMs) handle that class of work on hardware you already own, trained on synthetic data from Synthia so no confidential record is needed to tune them. Where a question genuinely needs a frontier model, the Governance Gateway routes it there under your policy, with the sensitive entities masked, and records the call.

Synthia builds entire synthetic companies from a claim graph, with the right answers planted inside them, and scores retrieval, prompts and policy adapters against that known ground truth before a single real record is connected. Either an answer matches the planted truth or it does not. Your production data is not the test set.

Jean says when it does not know, which demonstrates worse and works better. Answers carry their sources and a confidence score, so a weak answer reads as a weak answer rather than a fluent one, and anything below the threshold you set goes to a human instead of into a decision.

Yes. The ledger is hash-chained, so a missing or altered entry is detectable, and each entry holds the request, the policy verdict, the model used, the sources cited and the human who approved it. That record is what turns EU AI Act record-keeping and human oversight into a query rather than a project.

Why we build ground truth on purpose

Security, data and deployment

Where Jean runs, what it reads, and what the security review will be given.

In your own building on hardware you own, inside your own cloud tenancy, or in a single-tenant sovereign region you name: the UAE, Saudi Arabia or an EU member state. Data at rest, data in process and the index stay inside that boundary, and the residency is written into the contract rather than the brochure.

More than a model on your own server. An on-premise AI solution that holds up in a regulated company keeps four things inside your perimeter: the models, the index of your data, the policy that decides what each request may touch, and the record of what happened. Jean runs all four in your building, your cloud tenancy or a sovereign region you name, so no prompt, document or answer leaves to be processed, and the audit ledger stays in your name.

No. Nothing you ask Jean trains a model for anyone else, and no prompt, document or answer leaves your perimeter to improve a vendor’s model. The only training that happens is yours: the adaptive mates around the frozen core learn your company’s language from your own records, inside your own environment, and the resulting weights are your property to export or delete.

Jean reads the systems you connect it to, in place, under the permissions your identity provider already enforces. There is no upload step and no second copy to secure. What each class of data may be used for is set by your policy, and the Governance Gateway checks every request against it before anything runs. If the Gateway is unreachable, nothing runs.

Personal data stays inside your perimeter and inside its region, and the Gateway classifies it on the way in so anything that would leave is blocked or re-routed to a model inside the boundary. Our own management systems are certified to ISO 27001 for information security, ISO 27701 for privacy and ISO 42001 for AI management, and the certificates with their current scope statements are part of the security review.

More than 140 connectors today, covering finance, CRM, service desks, document stores, messaging, identity and code. A pilot usually starts with five to ten of them, chosen in discovery by where the answers to your own questions actually live.

The security answers in full

Starting

What the first three months look like, and what happens if it does not work.

With a demo and two questions your leadership asks every week. After that there are four stages: discovery, security review, a fixed-scope pilot on one department, then rollout. Three to four months from the first call to production is typical, with the security review running alongside discovery rather than after it.

No, and deliberately so. Jean is deployed through a guided engagement, so that scope, policy and validation are settled before it touches production data. Your own engineers can run and configure it; we are there for the stages where that is harder than it looks.

You stop, and you keep what was built. The pilot is graded on questions you wrote before anything was built, with the ledger as the evidence, and the ontology, the weights and the ledger have been in your storage since its first day.

What the pilot and the licence cost

Send us the question we have not answered.

Send it to info@metisjean.com, or bring it to a demo and we will answer it against your own systems rather than in the abstract.

Book a demo

Security questionnaires go to security@metisjean.com and are answered in full before any commercial conversation.