Modulo
Modulo handles the boilerplate.
You handle the remainder.
Whether vibe-coding, evolving your Software Development Lifecycle (SDLC), or enforcing audit trails—
Modulo adapts to your pace.
Modulo is the AI-control system of record for your agentic software delivery lifecycle. When an agent changes code, config, or a release, Modulo proves who approved it and what crossed each tool — immutable evidence for SOC 2, ISO 42001, and the EU AI Act. Self-hosted on your infrastructure, so no telemetry leaves your network. As a graph engineering platform, it lets you compose agents, tools, and human gates into explicit, governed execution graphs for your agentic SDLC.
AI-control system of record
Every agent change is recorded with who approved it and what it touched — across GitHub, Notion, and your other tools. Turn audit prep from a fire drill into a query.
Evidence across every tool
GitHub, GitLab, Notion, or any HTTP API. One audit trail spans them all — swap connectors without losing the thread.
Self-hosted
Deploy on your own infra. No telemetry. No data leaves your network.
What Modulo is — and isn't
What it is
Modulo is the AI-control system of record — the governance layer for your agentic SDLC. It records, audits, and gates every agent change across your existing tools, turning scattered activity into immutable, queryable evidence for SOC 2, ISO 42001, and the EU AI Act.
Bring your own agents. Modulo governs, audits, and gates the agents you already run — it does not ship its own agents. Drop it in front of the pipelines and models you operate today.
What it isn't
Modulo is not an agent vendor. It does not provide, sell, or host AI agents — you bring the agents; Modulo keeps them accountable. It is not a hosted SaaS, and not a no-code builder that hides what your pipelines actually do.
It is also not an observability dashboard that only watches after the fact. Modulo sits in the path: approval gates, human checkpoints, and immutable records are enforced as work happens, not reconstructed later.
Everything you need to govern agentic delivery
One control system of record for the agents, tools, and human gates already in your SDLC — auditable, approval-gated, and self-hosted.
Visual graph builder
Compose individual AI agents into governed delivery graphs using a drag-and-drop canvas. Each node is a separate, auditable, approval-gated step — the building block of your AI-control record.
Community library
Browse and import pre-built pipeline blueprints, agents, and connectors from the community. Copy, adapt, and combine to accelerate adoption.
Human-in-the-loop governance
Define exactly where human review is required. Agents flag checkpoints, and reviewers claim, inspect, approve, or reject with full run context.
Connector library
GitHub, GitLab, Notion, filesystem, or custom HTTP. Swap connectors without rewriting pipelines, each running sandboxed.
Role-based access control
Team-scoped permissions with admin, operator, and runner roles. Isolate pipelines, agents, and connectors by team with full audit visibility.
Model backend abstraction
Anthropic, OpenAI, or local models behind a common interface. Health checks, automatic rotation, per-node model selection.
Immutable AI-control audit trail
Every agent action, human decision, and system event is logged permanently — across GitHub, Notion, and your other tools. Prove who approved what for SOC 2, ISO 42001, and the EU AI Act, and replay any run for debugging.
Prompt and schema versioning
Every prompt and schema change creates a new version. Restore any previous version, and the audit log records which version produced each output.
Evaluation system
Define Large Language Model (LLM)-judge, regex, and block evaluations as automated quality gates. Conditionally route to human review when evaluations flag concerns.
Self-hosted by design
Docker Compose deploy on your own infrastructure. No telemetry. No data leaves your network. Air-gap capable.
OpenTelemetry observability
Native OpenTelemetry Protocol (OTLP) export for traces, metrics, and logs. Monitor pipeline execution, agent latency, and connector health in your existing observability stack.
Looking for SSO, RBAC, and audit export? Check out the Team plan on our Pricing page.