The organisational operating system · BYOC

The operating system
for the autonomous company.

lagstyr becomes the brain of your organisation — the one governed system where knowledge is built, work gets done, and risk is managed. It supplants the sprawl of legacy SaaS, runs in your own cloud on models you control, and never acts beyond human oversight.

Request early access How it works

The state of the organisation

Today, the organisation is scattered across its software.

failure mode 01

Islands

The same customer, employee, or entity is a different record in the CRM, the ledger, the HR system, and a signed contract. Nothing joins — so nothing, and no one, sees the whole.

failure mode 02

Sprawl

A separate SaaS tool for every function — accounting, payroll, CRM, risk. Each half-owns the truth, and you pay a permanent tax just to keep them in sync.

lagstyr collapses the stack into one coherent universe — one identity for every entity, one authoritative home for every fact, one brain for the whole organisation.

The brain of the organisation

Not a database. Not an automation layer.
The organisation's brain.

Everything the organisation knows lives in one place and compounds. Knowledge is built, not filed. Processes and procedures are maintained as living rules, not documents. Risk is watched continuously, not audited once a year.

  1. one identity

    Every entity has a single canonical id. Everything links back to it — and that linking is the universe.

  2. one authority

    Every fact has one authoritative home. Authority is sacred; projections are disposable and rebuildable at will.

  3. one memory

    An append-only log records what changed and when. No row is ever written without naming its source.

  4. one action surface

    Every agent action passes a single governed, typed chokepoint. Agents are never pointed at raw tables.

One system where you ran ten

It supplants the legacy SaaS stack.

As agents take on the work, the systems that once held it fall away. lagstyr is built to run the organisation end to end — one governed universe in place of a dozen disconnected tools.

  • Accounting
  • Finance
  • Treasury
  • Audit
  • Company Secretariat
  • HR
  • Payroll
  • CRM
  • ERP
  • Risk Management

Delivered as one coherent system — function by function, on a kernel that never fragments.

Deterministic execution, driven by agents

Agents execute. Humans decide.

Deterministic substrate, probabilistic agents. They reason over projections and evidence, but their output becomes authoritative only by passing a governed write surface — so the organisation's truth is never probabilistic, and nothing material happens without a human.

propose

An agent drafts a change. It cannot commit it.

approve

A human reviews and authorises — re-authenticated, proposer excluded.

commit

Only then does the kernel write it, and emit the event in the same breath.

read

Look, never touch.

write_safe

Routine writes, deterministically spot-checked into a review queue.

write_governed

Proposed by an agent, then approved by a human.

write_kernel

The organisation's spine. Approval required; the proposer can't sign off.

An agent starts with nothing — no shell, no filesystem, no ambient reach. It is handed exactly the skills its role requires. The confine is the grant.

Full sovereignty · BYOC + BYOM

Your organisation. Your cloud. Your model.

Each deployment runs in your own cloud, on the models you choose. The intelligence and the record both stay inside your boundary — nothing leaves, and no vendor reaches in.

BYOC

Bring your own cloud

Kernel, workers, database, and storage run inside your own cloud account. Your record data never crosses its trust boundary — isolation by deployment, not by row.

BYOM

Bring your own model

The intelligence runs on the models you choose — your endpoints and keys, self-hosted or a provider you trust. Every agent run pins its model at admission; no prompt or record leaks to a vendor default.

No reach-in

No vendor on the runtime path

No licence check, heartbeat, or telemetry on any runtime path. The data plane runs fully with the vendor unreachable — your organisation doesn't depend on ours being online.