Under The Hood

Three engines power the Klique platform: one that orchestrates every workload, one that governs every actor, and one that connects every model. Together they form one platform for the people who run AI and the people who just use it. Most AI platforms stop at the API level and assume every user is a developer. Klique keeps going: your infrastructure team gets the control plane, your builders get compute and models, and everyone else in your organization gets governed, self-serve access to AI, the same way they’d consume it from the cloud. No tickets, no credentials, no Kubernetes expertise.

AI consumersApplications & agentsKLIQUEAI Gatewayrouted · meteredGovernanceidentity · policyOrchestrationscheduled · placedYour infrastructureGPU · CPU · on-prem · cloud · edge

Every request takes the same three steps

One Platform. Three Engines.

Whether it’s a builder training a model, an agent running a task, or an employee asking a question, every request flows through the same three engines. Operators configure it once, everyone else just consumes.

Orchestration Engine

One resource pool. Every workload. Every user. Routed automatically.

Orchestration

Identity · Scheduler · Placement

Any silicon, any location

AI Identity Federation

Every request, human or agent, runs against your existing IdP: SSO authentication, RBAC, resource policies, and available credentials, before it reaches compute. Org-level, team-level, and agent-level permissions are all checked at the point of entry, not after the fact.

For everyday users that means one login with the SSO they already have. No API keys, no extra credentials, no new accounts.

The Scheduler

A multi-tenant, on-demand scheduler sits between authenticated requests and compute. It classifies every workload as persistent (a service) or ephemeral (a job) and routes it accordingly, enforcing per-team and per-agent quotas, priorities, and placement rules as it goes.

Operators tune it. Builders queue against it. Everyday users never see it.

Workload Optionality

Persistent Workloads: Long-running services that stay alive across interactions: workflow orchestration, web apps, chat endpoints, database access, LLM-as-a-Service. Your production AI tier, the part the whole workforce uses.

Ephemeral Workloads: Run-to-completion jobs: training, fine-tuning, batch inference, data ETL, evaluations. The builders’ tier. Resources release the moment the job is done.

Resource Allocation

Klique augments compute across three dimensions: silicon (GPU, TPU, CPU, xPU), location (on-prem, cloud, edge), and models. Builders request capabilities, not infrastructure. Consumers just use the service. The engine resolves the rest.

No GPU sits idle and no GPU sits reserved. Dynamic fractioning securely shares a single GPU across workloads. Inactive models wait in CPU memory and load to GPU on demand, without cold starts. Auto-scaling follows response latency, not GPU metrics.

Governance Engine

Purpose-built for the agentic era. Not retrofitted. Four tiers of control, from cluster admin to everyday consumer. Every actor governed. Every action scoped.

Agents are first-class participants in Klique’s architecture. They connect to your existing SSO/IdP the same as human users but with finer granularity and control. Resource requests are routed by the same scheduler and drawn from the same resource pool, under their own credentials, their own quotas, and their own access policies. The Governance Engine applies to agents and humans identically. No special mode. No retrofitted governance. This is what makes workforce-wide self-service safe: access is broad because control is built in.

Governance

Four tiers · Every actor

Human and agent alike
Cluster Admin

Cluster Admin

IT infrastructure team has full control over hardware pools, network policies, global security configuration, and cluster-level resource and tenant limits

Tenant Admin

Tenant Admin

IT admins can define tenant-wide policies across several areas: identity federation, cross-project governance, observability settings, cost allocation, AI services, compute resource quotas, and priorities.

AI Builder

AI Builder

Teams and agents building get project-scoped and group scoped control over resources, access policies, deployment configurations, and budget limits

AI Consumer

AI Consumer

Everyone else in your organization gets governed self-serve access to internal and external AI services within the boundaries set above. No infrastructure knowledge, no additional credentials, no IT ticket. Simply pick a service and use it.

AI Engine

One gateway. Every model. Every user. Spend you can see.

Every model your teams use, in-house, open-source (HuggingFace and others), or third-party APIs (OpenAI, Anthropic), sits behind a single gateway. Klique routes each request to the model that fits, based on the policies IT sets: cost, performance, data sensitivity. None of this is visible to the user. Builders get endpoints and APIs. Everyone else picks a service and uses it: no keys, no configs, no model names to remember.

Token management and spend tracking span compute, models, and services, so you can see what AI costs and what it returns, by team, by project, by request, down to the individual user or agent. Spend is controllable, not just visible. Budgets and rate limits cap usage; content-based routing sends each request to the optimal model that can handle it.

AI Engine

Gateway · Router · Spend

route to optimal model
One gateway, every modelrouted on policy
LLM GATEWAYSmart routercost · performance · sensitivityIn-house + privateOpen-weight · HuggingFaceOpenAI · AnthropicTask-router endpointsAny requestNO KEYS · NO CONFIGS · NO MODEL NAMES

Budgets and rate limits cap usage; content-based routing sends each request to the optimal model that can handle it.

Scheduled

On the right silicon

Scoped

Inside every boundary

Metered

Down to the request

Whether it is a builder training a model, an agent running a task, or an employee asking a question — the same three engines, in the same order.

The Klique Stack

Klique is the connective tissue between the infrastructure you run and the people who use AI: one platform layer over compute, data and models. You keep the bottom of the stack. Your teams keep the top. Klique is everything between.

Vertically integrated platform
Secure multi-tenant platformmetering · billing · chargeback
Applications, agents + workflowsInto the approved catalogue

Application gateway

Secured API endpointHosted applications
For AI buildersSecure, governed, self-service

AI development tooling + environments

WorkspacesProjectsPipelines
One policy over bothCompute + tokens, one surface

Single policy management

QuotasPrioritiesAccess rightsGuardrails
Your AI model servicesRoutes both

LLM gateway + smart router

Open-weightInternally developedPrivate endpointsAnthropicAzure OpenAI
Scheduling65% idle → 100% utilized

GPU scheduling + dynamic fractional allocation

PrioritiesQuotasFractioningMulti-tenant
Heterogeneous hardwareAny silicon, any environment

Resource pools

Cloud GPUsOn-prem GPUsNeo-cloudKubernetesBare metalHPC clusters
RoleAI consumers

The approved catalogue. They never see below.

RoleAI builders

Governed environments, not a DevOps queue.

RoleAI operators

Own the resources and the policy over them.

Operators configure it once. Everyone else just consumes.
Four tiers of control
CLUSTER ADMINHardware pools · network policy · global securityTENANT ADMINIdentity federation · cost allocation · quotasAI BUILDERProject scope · deployments · budgetsAI CONSUMERGoverned self-serve, inside every boundary aboveevery actor enters at the innermost scope it is cleared for

Agents are first-class participants: their own credentials, their own quotas, their own access policies. No special mode, no retrofitted governance.

One Policy Object. Two Kinds of Traffic.

Quota, priority and access are not configured per tool — they are one policy object. The scheduler enforces it when the traffic is a compute job. The gateway enforces the same object when the traffic is an AI request.

One policy plane, two enginesjobs and requests · same rules
A JOB · TRAIN · BATCHA REQUEST · CHAT · AGENTONE POLICY OBJECTquota · priority · access · routing — written onceSchedulerenforces it on jobsGatewayenforces it on requestsAny siliconGPU · CPU · on-prem · cloud · edgeAny modelprivate · API · open-weightone meter · one ledger · one attribution

A training job and a chat completion are governed by the same object: the same quota, the same priority, the same access decision. The scheduler enforces it on silicon; the gateway enforces it on models. Nothing is configured twice, so nothing can drift apart.

Where Klique and Kubernetes Come Together

Your Kubernetes still handles the physical layer: fault recovery, rolling updates. Klique’s scheduler sits on top, handling the logic: which tenant gets what resources, under what policy. No writing manifests, no managing operators, no debugging scheduler configs, and no Kubernetes expertise required to operate the platform day to day. Two layers, doing two different jobs. Klique runs on top of any flavor of Kubernetes (OpenShift, Suse, Canonical, vanilla upstream and others) or plain VMs, and adds what they all stop short of: AI platform that the whole workforce can consume.

The full stack, layer by layertenants above · silicon below
Tenant ATenant BKlique Web Interfacebilling · access control · cluster & ML dashboards · data catalogBILLINGPV · OBJECT STORAGENode 1GPU-AGPU-BGPU-Cmetering agentNode 2GPU-AGPU-BGPU-Cmetering agentNode NGPU-AGPU-BGPU-Cmetering agent⋯Klique Schedulertenant policy manager · quotas · priorities · placementjobjobjobKubernetes · OpenShift · VMs · bare-metal · HPC (Slurm/PBS)on-prem · AWS · GCP · Azure — any flavor, unchangedNVIDIA · AMD · INTEL · ARMMULTI-TENANT · MULTI-CLUSTER · MULTI-CLOUD · ONE PANE OF GLASS

Multi-tenant from the web interface down to the silicon. Klique schedules, governs and meters across every node; Kubernetes, VMs and bare-metal keep the machines running beneath it.

For the full technical breakdown, the architecture, the API surface, and the deployment model — head to the documentation.

Ready to See Klique Running on Your Infrastructure?

Klique runs on the stack you already own: your Kubernetes, your GPU clusters, your cloud accounts, your existing models, and makes them usable by every person and agent in your organization. Deploy on-prem, air-gapped, in the cloud, or hybrid. Your data, models, and identity stay under your control.

Request A Demo
K klique v2 02