# Substrait

> Substrait is the operating system for AI-built tools: people who are not engineers build tools with the AI they already use, and Substrait gives every tool a home, an identity, the data its owner approved and a security check, on Substrait's cloud or inside the company's own.

Substrait is a product of Substrait Pte. Ltd., a company registered in Singapore. It serves companies in Southeast Asia that have real data and real approvals to protect.
Each link below is the markdown copy of a page; the same words are on the HTML page at the same address without ".md".
The whole site in one file: https://substrait.build/llms-full.txt
Clients sign in at https://app.pluto.substrait.build. A buyer's next step is to book a demo: https://substrait.build/book-a-demo/

## Start here

- [The operating system for AI-built tools](https://substrait.build/index.md): Substrait is the operating system for AI-built tools. Your people build with the AI they already use; Substrait puts what they build live in one click, keeps every data flow under your control, secures it to your organisation's own rules, and adds productivity tools for an AI-enabled workforce.

## The product: three pillars (Build, Data, Security) and productivity tools

- [Build with the AI you already use. Go live in one click.](https://substrait.build/build.md): Build, Substrait's first pillar. Citizen developers build with the AI model they already use, and one click puts each tool live through the security check, with dev and production, rollback, monitoring and an owner, so no tool is ever orphaned.
- [Every data flow, under your control](https://substrait.build/data.md): Data, Substrait's second pillar. Substrait brokers every flow of data between a company's systems and its AI-built tools: the data owner approves it, Substrait carries it through one gateway, and every read is on record.
- [Security, configured exactly for your organisation](https://substrait.build/security.md): Security, Substrait's third pillar. Every release is checked before production, and each organisation sets how strict that check is: its own risk tiers, blocking rules, severity names, approvers and deadlines, with a full audit trail nobody can alter.
- [Your people's AI, working as one team](https://substrait.build/productivity.md): Substrait's productivity tools: Slate, where a team and their AI think together; templates built on Substrait's best practice; Agentic Builder, where a request in plain words gets built; and the communications centre, one central, pre-wired exchange for every alert, approval, notification and message, so no tool builds its own.

## About Substrait

- [How we work, and how pricing works](https://substrait.build/how-we-work.md): Substrait is a platform and a forward-deployed team in your region. It comes as one pre-configured system, with two paths in: teams that already build, and companies whose people do not build yet. Pricing is a monthly seat for each builder, approver and admin, with a one-time setup fee only when Substrait's team sets it up; there is no platform fee and viewers are free.
- [Solutions for every starting point](https://substrait.build/solutions.md): Substrait serves three kinds of company: teams already building with AI, companies ready to start whose work still runs on spreadsheets, chat and paper, and companies stuck on a closed legacy vendor system. Each has its own way in.
- [Substrait in facts](https://substrait.build/facts.md): Plain facts about Substrait: what it is, who makes it, who it is for, what it works with, where it runs, how it is priced and how to start.
- [Glossary of Substrait terms](https://substrait.build/glossary.md): What Substrait's own words mean, from AI-built tool and data owner to promotion, the Substrait layer and seat.

## Problems Substrait solves

- [How to let staff build tools with AI, safely](https://substrait.build/problems/let-staff-build-tools-with-ai-safely.md): Staff can build working tools with AI in an afternoon. Substrait lets a company say yes to that: every tool gets an owner, a security check, and only the data its owner approved.
- [How to govern the apps and tools people build with AI](https://substrait.build/problems/govern-tools-built-with-ai.md): People across a company now build apps, agents and Slates with AI. Substrait puts every one in one registry, with an owner, a risk tier, a security check and an audit trail.
- [How to give AI-built tools access to company data, safely](https://substrait.build/problems/give-ai-built-tools-access-to-company-data-safely.md): On Substrait, a tool reads company data only after the data owner approves it, for a set time, through a gateway that holds the credential and records every read.
- [How to get out of a legacy vendor system](https://substrait.build/problems/replace-a-legacy-system.md): When a closed vendor system is slow and expensive to change, Substrait's team rebuilds the functions you use on Substrait, so you own the data and the software and later changes are fast.
- [How to put a tool built with AI into production](https://substrait.build/problems/put-an-ai-built-prototype-into-production.md): A tool built with Claude Code or Cursor works on a laptop. Substrait takes it to production with one command: dev behind sign-in first, then promotion through a security check, with rollback.
- [How to run AI agents on company systems, safely](https://substrait.build/problems/run-ai-agents-on-company-systems-safely.md): An agent decides at runtime what to do. Substrait gives each agent its own identity, limits narrower than its owner's, a check on every action, a record of what it did for whom, and a switch that stops it.
- [How to get the small tools on IT's backlog built](https://substrait.build/problems/clear-the-it-backlog.md): IT builds the core systems, and the long tail of small tools never gets built. Substrait lets the people who need those tools build them, and turns requests into tools through product management and build agents.
- [How to run AI-built tools inside your own cloud](https://substrait.build/problems/keep-ai-built-tools-in-our-own-cloud.md): Substrait runs the whole tool, front end, back end and data, inside the company's own cloud account or data centre. Only policy and deployment instructions cross the boundary; data never leaves.
- [How to get systems built when your people cannot build yet](https://substrait.build/problems/build-systems-when-staff-cannot-build-yet.md): When work runs on spreadsheets, chat and paper and staff are not yet confident builders, Substrait's team builds the first systems with a named person from your team, and trains your people to keep building.

## Capabilities

- [Build with the AI model you already use](https://substrait.build/capabilities/build-with-your-own-ai-model.md): Substrait does not replace your people's AI model. A plugin for Claude Code, the Claude desktop app and Cursor connects it to Substrait, and a scaffold fitted to your company shapes what it produces.
- [One click to live, through the security check](https://substrait.build/capabilities/one-command-go-live.md): A builder sends a tool to Substrait with one command, through their AI model, and goes live with one click. Substrait promotes the exact build tested in dev to production, only through the security check.
- [Guided building: every builder knows what to do next](https://substrait.build/capabilities/guided-building.md): Substrait coaches each builder inside the platform, from their first sign-in to their first tool in production, at the depth that fits what they already know. The Builder Academy is a separate, optional human service.
- [On Substrait's cloud, or inside yours](https://substrait.build/capabilities/your-own-cloud.md): Start on a standard setup on Substrait's cloud with nothing to install, or run Substrait in your own cloud account or data centre. In your environment, the whole tool and its data stay inside your perimeter.
- [Every tool your people use, in one place](https://substrait.build/capabilities/home-and-explore.md): Substrait gives every employee a Home page with their own tools on it, and an Explore directory of what colleagues chose to share. Finding a tool never grants access to it.
- [Nothing breaks quietly](https://substrait.build/capabilities/monitoring-and-alerts.md): Substrait watches every tool it runs: crash detection, startup checks and request-level monitoring, with alerts to the builder and the owner about build questions, scan results and release status.
- [Company data, granted by its owner](https://substrait.build/capabilities/governed-data-access.md): A tool on Substrait reads company data only after the data owner approves it, for a set time, through one gateway that holds the credential, checks every call and records every read.
- [One catalogue of the APIs and data your tools can use](https://substrait.build/capabilities/api-library.md): Substrait's API Library lists your company's APIs, the tools your people built and your warehouse data sets. Builders browse it in conversation with their AI model, and see only what their groups allow.
- [A security check before every release reaches production](https://substrait.build/capabilities/security-check.md): Substrait scans every release for leaked secrets, weak code, vulnerable dependencies, container issues and problems in the running tool. A tool reaches production only through a promotion that clears the check.
- [Set the guardrails once, not for every change](https://substrait.build/capabilities/policies-and-approvals.md): Each organisation sets its own policies and risk tiers in Substrait. Changes inside an approved boundary ship freely; only a change that crosses it goes back for approval.
- [A security command centre, built in](https://substrait.build/capabilities/security-command-centre.md): Substrait gives the security team one console for every finding across every tool, opening on one page that answers how exposed the company is right now, in the organisation's own severity names.
- [An audit trail nobody can alter](https://substrait.build/capabilities/audit-trail.md): Substrait records every access and action in an audit trail that nobody, a platform admin included, can change after the fact. It is queryable, exportable to your security monitoring, and kept in storage you control.
- [See every tool your people built](https://substrait.build/capabilities/tool-registry.md): Substrait registers every tool, agent, Slate, skill and knowledge base with an owner, a purpose, a risk tier and a version, and gives every one a switch that stops it.
- [Right-sized authority for every person](https://substrait.build/capabilities/roles-and-access.md): Substrait keeps four kinds of access apart: data groups for what a person may see and read, capability groups for what they may do on the platform, app roles for what they may do on one tool, and each tool's own sign-in.
- [Agents with their own identity and their own limits](https://substrait.build/capabilities/governed-agents.md): On Substrait an agent is a tool its builder owns. Each agent has its own scoped identity, authority never wider than its owner's, a check on every action, a record of whom it acted for, and a switch on its identity.
- [Slate: where teams work, beyond slides and documents](https://substrait.build/capabilities/slate.md): A Slate is a living page a team builds together, each person through their own AI, and each AI draws on the whole shared project. It holds what a deck or a document cannot: interactive charts, dashboards, tables to fill in, checklists, layers of detail, timelines and animated process flows.
- [Templates: Substrait's best practice, wired to your company](https://substrait.build/capabilities/seeded-templates.md): Substrait builds templates of common business software on best practice from its own experience. Every installation starts with them, already connected to the company's cloud, sign-on, identity, data and design. A template is copied and owned, never locked to a central version.
- [Agentic Builder: requests become tools](https://substrait.build/capabilities/agentic-builder.md): Agentic Builder is the part of Substrait where anyone asks for a new tool or a change in plain words, and build agents plan, build, test and ship it under the company's own rules, with the tool's owner in charge.
- [The communications centre: one pre-wired exchange for the whole organisation](https://substrait.build/capabilities/communications.md): The communications centre is one central, pre-wired exchange that connects every alert, approval, notification and message across the organisation. Every tool built on Substrait calls it, so no tool builds its own. The company hooks in its own Slack, Google Chat, Teams, email or WhatsApp, and each person chooses the channel.

## Indexes

- [Problems Substrait solves](https://substrait.build/problems.md): The questions companies ask about AI-built tools, each answered on its own page: letting staff build safely, governing what they build, data access, agents, legacy systems and more.
- [What Substrait does](https://substrait.build/capabilities.md): Every Substrait capability on its own page, grouped by pillar: build, data and security, plus productivity tools such as Slate, Agentic Builder, the communications centre and templates.

## Other pages

- [Book a demo](https://substrait.build/book-a-demo.md): Book a demo of Substrait with the team. Bring one real use case; you will see a tool go from an AI model to production, with its data approved and its security check passed.
- [Privacy notice](https://substrait.build/privacy.md): How Substrait Pte. Ltd. collects, uses, discloses and protects personal data under Singapore's Personal Data Protection Act 2012.