Runs in your network
Deploy the cloud control plane inside your own VPC, or fully airgapped. The fleet view sits next to your agents, not outside them.
Enterprise · early access
The same engine, inside your network boundary.
For teams that can't send agent telemetry to a third party. Run TokenJam's control plane self-hosted or fully airgapped. Your spend data never leaves your boundary.
Your data stays put
TokenJam ingests OpenTelemetry you already emit. Spans, costs, and certifications stay in your warehouse. Nothing is shipped to us.
The same proving engine
The engine that powers the open-source core runs unchanged inside your boundary. Same verdicts, your hardware.
Open core, no lock-in
Built on OpenTelemetry and an Apache-2.0 core. Portable by construction, so the data and the analyzers are yours to keep.
Spend attribution
Spend by department
$40.2k-31%
1 Engineering $13.0k -16%
2 Sales $8.0k +4%
3 Marketing $6.5k -12%
4 Product $5.5k -9%
5 Finance $4.2k -24%
6 HR $3.0k -31%
$14.4k recoverable via certified swaps 62% of eligible spend under enforcement
Fleet governance
Control and attestation across the whole org.
Your platform and security teams get control across the whole fleet — and a record they can put in front of an auditor.
- Org-wide rollups of spend, usage, and certifications across every agent and team.
- Department budgets and chargeback so cost lands on the team that drove it.
- Attestation trail recording every proven swap and the policy that enforced it.
- Dedicated support and SLA with the team that builds the engine.
Security & compliance
Security built for your boundary.
Deployment, identity, and data controls that fit the way your security team already works — with an attestation trail behind every decision the control plane makes.
Self-hosted / airgapped deployment
OpenTelemetry-native ingest (no agent SDK)
Audit & attestation trail
Encryption in transit and at rest
SSO / SAML / SCIM
Role-based access control (RBAC)
Data residency controls
SOC 2 compliance program
Bring the engine inside your boundary.
Tell us about your fleet and your security requirements. We'll walk through a self-hosted deployment and where it fits your timeline.