One install, four environments
The same Howlet runs on a developer's laptop, in an offline factory, and on AWS. You don't relearn the product when the environment changes.
ADR-001 + ADR-007 · 10 values overlays · single flat Helm chart
Platform
12 modules, one codebase
From GenAI Studio to compliance, from stream processing to source control, all in the same codebase, same authorization, same audit. Architectural decisions are published as ADRs by our product team.
Why Howlet
Not slogans. Architecture decisions.
Every headline below is a real mechanism your engineers can inspect on the product page.
Howlet Coding Agent
A natural-language command connects to your own code repo and builds AI and data flows in Howlet Studio 50-100× faster. Your source code never leaves; critical actions require human approval, and every step lands in a tamper-evident audit trail.
Connects to your own repo · RBAC + human-in-the-loop · tamper-evident audit · 50-100× faster
GDPR erasure is not a single SQL DELETE
When a subject requests erasure, the data is removed in cascade across seven separate systems. The 30-day window is monitored live, and a signed evidence pack is produced for the regulator.
ADR-028 · GDPR/KVKK Lifecycle · signed evidence pack
Your data stays in Turkey
Deploy to AWS Istanbul Local Zone and keep all data within Turkish borders. KVKK data residency is satisfied at the infrastructure level, not through contractual workarounds.
AWS Istanbul Local Zone · KVKK data residency · on-prem and air-gapped alternatives
12 modules
One codebase, one permission model, one audit trail
Replace 6–8 vendors in your AI/ML stack with a single platform; clear your integration backlog.
Agents · MCP · Guardrails
GenAI Studio
Build production-grade AI agents. Each agent runs isolated, with three layers of safety filtering on input, output and execution.
92 native tools · 13 LLMs · 6 Code Agent tools · ADR-200/202/203
Natural language · Repo-connected
Coding Agent
Send a natural-language command and the Howlet Coding Agent builds AI and data flows 50-100x faster. Your source code never leaves; every step lands in a tamper-evident audit trail.
Connects to your repo · RBAC + human-in-the-loop · tamper-evident audit
RAG · Knowledge base
DataHub
Open your enterprise documents to AI safely. 11 connectors, four vector backends and Turkish-aware PII detection out of the box.
11 connectors · 7 PII types · TCKN/VKN modulus checksum default
Visual pipelines · auto-engine
Data Engineering
Design ETL and transformation flows visually. Howlet picks the right engine: fast on small data, Spark at scale. You never choose the engine manually.
184 ready-made building blocks · 6 categories · ADR-141 WriteFence exactly-once
Training · HPO · Eval
ML Workshop
Train models, run hyperparameter sweeps, measure fairness. GPU quotas, idle shutdown and audit logging are built into every step.
5 training adapters · 4 HPO algorithms · 5 fairness metrics · MLflow hidden
Registry · Deploy · Drift
Model Ops
Register models, promote across three environments, choose canary, shadow or A/B. When drift is detected, retraining is triggered automatically.
6 model formats · 4-test drift ensemble · ADR-002 production immunity
Real-time · exactly-once
Stream Processing
Kafka, Flink, Spark or NiFi. Howlet picks the engine that fits your topology, not the other way around. All designed in one canvas.
~125 stream nodes · 5 engines · 13-state machine · WriteFence
Git · GitOps
Source Control
Your visual artifacts sync with Git automatically. A single atomic commit pushes 30 files to any of four major Git providers.
GitHub/GitLab/Bitbucket/Gitea · 3-way merge · HMAC webhook
Metrics · Trace · Correlation
Observability
Trace a user request from sign-in to LLM call in one window. A log line, a distributed trace and an AI invocation share the same correlation ID.
7 ready dashboards · 25+ Prometheus metrics · 4 pillars
GDPR · KVKK · Policy
Governance & Compliance
Day-one operations for erasure requests, consent management and policy enforcement. The file you'd hand a regulator is one click away.
60+ audit actions · 11 PII detectors · ISO 27560 JWS receipts
Identity · MFA · SSO
IAM
Let employees sign in with their existing corporate identity; when permissions change, they don't need to log in again. SSO and MFA are standard.
241 privileges · TOTP + WebAuthn + recovery · SAML/OIDC/LDAP
Authority · License · GPU · DR
Administration
Four authority tiers: root, platform, tenant, workspace. Idle GPUs scale to zero; backups run continuously without disrupting users.
200 privileges · RPO≈0 · 14 health probes · hybrid GPU
Authority model
Four-tier authority: no single super-user
Each tier sees and audits only its own scope. If the root account is lost, the runbook offers a three-step recovery path; there is no dead end.
1. Root
Single account, invariant
Always-on MFA, IP allow-list and sudo TTL enforced. Recovery in three layers: codes, CLI, manual DB. Hardcoded role exclusion from Remember Me.
2. Platform Admin
Operator across tenants
Tenant lifecycle, profile upgrades, GPU quotas, audit access. Sees every tenant's perimeter; cannot cross into one.
3. Tenant Admin
Customer-side admin
Manages workspaces, users and licenses. Database-per-tenant isolation enforced; no path into other tenants' data.
4. Workspace Admin
Team admin
Projects, RBAC assignment and environment promotions for a single team. Sees only that team's audit trail.
Erasure request DSR-2026-0042
30-day SLA · Day 4LIVE
Systems erased
5 / 7
Hash chain
OK
- 01Platform PostgresDone
- 02Tenant PostgresDone
- 03OpenSearchDone
- 04ClickHouseDone
- 05LangfuseDone
- 06ValkeyRunning
- 07MinIOPending
Signed evidence pack, ready for the regulator.
Governance & Compliance
Erasure is not a single click. It is a process you can show to a regulator.
When a subject requests erasure, Howlet cleans every system the data passed through. The 30-day statutory window is tracked live and a signed evidence pack is produced automatically.
- Seven-system erasure cascade: platform DB, tenant DB, search indexes, analytics, LLM trace, sessions, object storage.
- Consent receipts signed with ISO 27560 JWS; retroactive policy mutation becomes impossible.
- Audit rows linked by SHA-256 hash chain; every row carries the previous and current hash.
- Regional PII enabled by default: Turkish national ID, tax ID, IBAN and phone, all with checksum validation.
- SIEM fan-out built in: Splunk, QRadar and Sentinel via CEF, HMAC-signed, queued retry on failure.
- AWS Turkey Local Zone support: deploy to Istanbul so data never leaves Turkish borders. KVKK data residency satisfied at the infrastructure level.
Ready when you are
From model to product in 30 minutes, with a demo tailored to your scenario.
Training to serving, RAG to streaming, RBAC to disaster recovery. Not vendor lock-in. Installed on your own infrastructure.
On-prem · air-gapped · AWS. Your data stays with you, the proof stays in the chain.