KPMG Internal Secure AI
Secure AI for classified engagements and sensitive client work, run by KPMG.
Sovereign AI gateway
A secure, fully audited AI gateway for classified and regulated workloads. Built, operational, and ready to scale, with every byte stored onshore.
The problem
Government, defence, financial services, and health face mandates that dictate where data goes and who can touch it.
ISM, PSPF, and sector-specific frameworks are not guidance, they are obligations. The bar is to demonstrate compliance, not merely claim it.
Sovereign AI exists on the hyperscalers. Operationalising it for accreditation is where most organisations stall: building the security boundaries, audit controls, and operational processes that survive an IRAP assessment.
Model availability varies by region and provider. Regulated organisations need the best models available, not just what one cloud happens to offer.
The platform
Built for organisations that must prove their controls. It slots into existing infrastructure as a discrete, assessable block, without replacing the tools and workflows you already run.
Well-defined security boundaries that minimise the friction of an IRAP assessment. ISM and PSPF, to PROTECTED.
Runs in Australian cloud regions today, and in-jurisdiction wherever it is deployed. Choose sovereign inferencing and your data stays in the jurisdiction.
Every interaction logged, encrypted, and attributable. Customer-managed encryption keys throughout.
The leading frontier models, served through one OpenAI-compatible gateway. Model-agnostic and cloud-agnostic by architecture, never locked to a single provider.
The leading agentic coding assistant, running natively through sovereign infrastructure. Fully compliant.
A developer CLI and an OpenAI-compatible API. Drop-in alongside the workflows your teams already use.
A discrete, assessable component that integrates with existing systems rather than displacing them.
Secure by design
Sovereignty and data residency are the reason Kelios exists. The controls are built into the architecture, and KPMG retains full visibility over how AI is used on your work.
Storage and logs stay in Australian cloud regions (ap-southeast-2). Pin a team to sovereign inferencing and its model calls stay in the country too.
Encryption keys you hold and control. Data at rest and in transit is encrypted end to end.
Every request is logged and tied to an identity. Who used what, when, and why, for evidence and review.
A contained, in-region perimeter with no general internet egress on the model path. Governed access, gated by identity.
Data resident in ap-southeast-2
Global scale
Sovereign AI is not only an Australian need. Kelios can be deployed to process data with data sovereignty assurance in Australia, Japan, the European Union, India, the United Kingdom, Korea and the United States, and it is live in Australia today. In each jurisdiction it runs as a fully isolated, accreditation-ready capability in that jurisdiction's own cloud regions. The same architecture, wherever your obligations live.
Delivery models
Secure AI for classified engagements and sensitive client work, run by KPMG.
KPMG hosts, your teams use. No client infrastructure to stand up or maintain.
Deployed into your own cloud as a consulting engagement, licensed for the long term.
Dedicated, air-gapped hardware for the highest classification levels.
Built and operational, today
Talk to the team about a briefing, a managed instance, or a deployment into your environment.