CoeOS

How CoeOS works

CoeOS is not just a chat client: it is also the router. You talk to an assistant, drop in documents, run reviews, keep a working memory. Under the hood, a single component governs everything that could leave the firm: the CoeOS box.

The client and the box are one system. The client holds no provider URL, no API key: it knows a single address, the box. Every model call goes through it. The direct consequence for a professional bound by confidentiality: there is only one way out, and that door is governed, logged and tested.

Another founding principle: no component pins a fixed model. Agents, workflows and memory all point at a CoeOS meta-model; the box sends each request to the model proven best for that skill. You choose the function, CoeOS chooses the model.

The three pillars

• Agents — a primary assistant (Nemo) that delegates to specialised sub-agents, under guardrails and allow-listed tools. Everything is traceable. Regulated reviews run through compartmentalised workflows with a mandatory human gate.
• The Guardian — the governance layer: single egress point, object classification, tamper-evident audit log, refuse by default. The trust foundation for professional secrecy (GDPR, EU AI Act).
• Memory — two mechanisms: the Vault (write, per user) that remembers, and RAG (read, shared) that documents.