Forge at a Glance
Forge is iTmethods' Governed AI Infrastructure for regulated enterprises: Governed Tooling Layer (Available Now) and Forge AI Substrate (Hybrid), the foundation Dark Factory runs on. One discipline underneath: Sovereign Substrate Engineering. Governed by Reign.
- Governed Tooling Layer. Managed runtime for the customer's 55-plus enterprise tool estate under one governed envelope.
- Forge AI Substrate. Agent Runtime Operations, Governed Foundation Model Access, MCP (Model Context Protocol) and Tool Operations, Governed Sovereign Control Plane.
- Dark Factory. Governed autonomous software delivery, built on Forge and governed by Reign. In production.
- Sovereign Substrate Engineering: the codified 21-year practice operating regulated workloads under customer ownership.
- Reign integration: Audit Ledger (CAVR, the tamper-evident audit ledger) plus Assurance Packs across 13-plus regulatory frameworks.
- Four deployment topologies: SaaS, Dedicated Cloud, Customer Cloud, Air-Gapped.
Platform Owners, CTOs, VPs of Engineering, Heads of AI, CISOs, CAIOs, Chief Risk Officers, Audit Committees at regulated enterprises (banking, capital markets, insurance, life sciences, defense, public sector) standing up Governed AI Infrastructure under EU AI Act, OSFI E-23, SR 26-2, FDA PCCP, DORA, BCBS 239, and ISO 42001.
SaaS, Dedicated Cloud, Customer Cloud (AWS, Azure, GCP), Air-Gapped. Same architecture, same evidence model.
SOC 2 Type II since 2018. Reign Assurance Packs pre-mapped to EU AI Act, OSFI E-23, SR 26-2, FDA PCCP, DORA, BCBS 239, ISO 42001, NIST AI RMF, SOC 2.
21 years operating mission-critical regulated environments across banking, capital markets, life sciences, semiconductor, and defense in North America and Europe. Bootstrapped, profitable, founder-led.
Forge. Governed AI Infrastructure for Regulated Enterprises.
Forge runs the governed infrastructure underneath production AI. The substrate where continuous remediation actually happens, delivered by operating partners. Built with Sovereign Substrate Engineering, the practice of running data, compute, model, and agent infrastructure under customer ownership to audit-grade.
21 years operating mission-critical regulated environments for enterprises across banking, capital markets, life sciences, semiconductor, and defense in North America and Europe.
Two Cycles Converging on the Substrate.
Two structural cycles are hitting regulated enterprises at the same time. They cannot be answered with the same infrastructure that ran the cloud-native era.
Forge sits at the intersection. The runtime layer that makes both cycles answerable at the same time, inside the same envelope, against the same evidence model. Not a SaaS overlay. Not a hyperscaler reseller play. The operational substrate.
Three components. One discipline.
Each component is independently buyable. Together they form a single Governed AI Infrastructure spine. The architecture is deliberate and visible to the buyer on day one. Status is named where it lives, not buried in fine print.
Governed Tooling Layer
Inside the Governed Tooling Layer:Managed Tools Catalog·Fluxnova on Forge·AI-Native Governed SDLC·Forge Managed AWS
More from Forge:Professional Services·Resources·Free Trials
Governed Tooling Layer.
Managed runtime for the customer's 55-plus enterprise tool estate (DevOps, security, observability, AI-native development) inside one governed envelope. Where 2025 Modern DevOps meets the 2026 AI-native SDLC under a single set of controls.
Atlassian, GitHub, GitLab, JFrog, SonarQube run as managed runtime. Cursor, Claude Code, Cortex, Docker, GitHub Copilot run inside an AI-Native Governed SDLC with identity binding, prompt and output logging, secret hygiene, and policy enforcement at the pipeline boundary. Twenty-one years of regulated DevOps DNA, productized for Platform Owners and VPs of Engineering.
Forge AI Substrate
HybridInside the substrate:Agent Runtime Operations·Governed Foundation Model Access·MCP and Tool Operations·Governed Sovereign Control Plane
Forge AI Substrate.
Sovereign operations of the AI stack inside the customer envelope. Four sub-components: Agent Runtime Operations, Governed Foundation Model Access, MCP and Tool Operations, and a Governed Sovereign Control Plane.
Agent runtime, foundation model usage, MCP servers, identity, keys, and audit logging are run as audit-grade infrastructure rather than as experiments. Built for CTOs, Heads of AI, CISOs, and CAIOs who need agent runtime, model access, and MCP operations to be one governed substrate rather than three disconnected stacks.
Explore Forge AI SubstrateFlagship
In productionDark Factory.
Governed autonomous software delivery on the customer's existing toolchain. Agents build, test, and ship inside the customer envelope; every merge clears a human approval gate; Reign captures the full run as a tamper-evident audit trail.
Built on the Governed Tooling Layer and Forge AI Substrate. Governed by Reign. In production today: 5-7x effective engineering output, ~21 hour median cycle time, 0 reverts across 922 merges, 100% human-approved merges.
Explore Dark FactoryThe Practice Underneath
Sovereign Substrate Engineering is iTmethods' codified 21-year practice of operating foundational infrastructure (data, compute, model, agent runtime) under customer ownership and customer control, to audit-grade. Hyperscalers operate their own substrate, not yours. SaaS governance vendors sit above the substrate and report on it. iTmethods runs the substrate inside the customer envelope.
Read the practiceReign · Governance Layer
Forge runs the runtime. Reign governs every decision it makes. Every Forge surface (Governed Tooling Layer, Forge AI Substrate, every Dark Factory run) emits structured evidence into Reign's Audit Ledger (CAVR), turned into regulator-ready output through Assurance Packs pre-mapped to 13-plus frameworks. Forge without Reign is governed runtime without a regulator-ready output. Reign without Forge is an evidence layer with nothing operational underneath.
How Reign integratesDeployment
Same architecture across all four topologies.
See deployment optionsDesign Partner Program
OpenCo-Develop the In-Flight Components. Inside a Dark Factory Pilot.
Selected regulated enterprises standing up agentic AI co-develop the in-flight Forge components alongside iTmethods principals, inside a Dark Factory pilot running on one of their own workflows. Partners shape the operational pattern that becomes the production product. They receive named iTmethods architects plus an embedded expert-led pod, lock partner pricing, and become reference customers ahead of broad availability.
Open across banking, capital markets, insurance, life sciences, defense, and public sector. Selective 2026 cohort, by application. Selection prioritizes use cases where the regulator outcome is explicit and the operational scope is well-bounded.
What partners get. Co-development of the in-flight substrate components (Governed Foundation Model Access, Sovereign Control Plane) inside a Dark Factory pilot. Reign integration in lockstep, so the Audit Ledger (CAVR) and Assurance Packs are wired into the partner's runtime from day one rather than retrofitted.
The Forge Roadmap.
Forge is being built and shipped in stages. The Governed Tooling Layer is the 21-year foundation in production today. Dark Factory is in production. The remaining Forge AI Substrate components are shipping in waves through 2026, subject to design partner co-development cadence.
Components ship to general availability when the operational pattern is proven with design partners, on partner cadence rather than a marketing calendar. Components in production stay in production: the Governed Tooling Layer is operating today.
Built for Regulated. Operated to Audit-Grade.
Forge runs production workloads across banking, capital markets, insurance, life sciences, defense, and public sector. The reference base is deep on the regulated side specifically because Forge was built for it.
SOC 2 Type II
Continuously maintained since 2018
Regulated verticals
Banking · Capital Markets · Life Sciences · Defense · Semiconductor
North America & Europe
Operating footprint
21 Years
Operating regulated workloads
Operating mission-critical regulated environments for enterprises across banking, capital markets, life sciences, semiconductor, and defense in North America and Europe. Bootstrapped, profitable, founder-led.
Built on open foundations
Member and contributor in the open standards behind governed AI. The Linux Foundation, FINOS, and the Agentic AI Foundation.
Talk to Forge.
For platform owners, CTOs, Heads of AI, and CISOs evaluating Governed AI Infrastructure for production deployment. Or take the Dark Factory readiness assessment: 2 minutes, 6 questions, a defensible read on whether your organization is ready to run governed autonomous software delivery.
Frequently asked questions
- What is Forge?
- Forge runs the governed infrastructure underneath production AI. It is the substrate where continuous remediation actually happens, delivered by operating partners. Two operational layers deliver the outcome: the Governed Tooling Layer produces an audit-grade envelope around the customer's enterprise tool estate, and Forge AI Substrate produces a sovereign operational plane for agents, foundation model access, and MCP and tool operations inside the customer envelope. Dark Factory, the flagship product, runs governed autonomous software delivery on top of both. Everything is underpinned by Sovereign Substrate Engineering and governed by Reign.
- What is Sovereign Substrate Engineering?
- Sovereign Substrate Engineering is iTmethods' codified 21-year practice of operating foundational infrastructure (data, compute, model, agent runtime) under customer ownership and customer control, to audit-grade. Hyperscalers operate their own substrate. SaaS governance vendors sit above the substrate. iTmethods runs the substrate inside the customer envelope.
- What is the difference between Forge and Reign?
- Reign delivers continuous remediation at the governance layer the moment it goes live. Forge extends remediation into the runtime layer. Every Forge surface emits structured evidence into Reign's Audit Ledger (CAVR), and Reign's Assurance Packs are pre-mapped to 13-plus frameworks including EU AI Act, OSFI E-23, SR 26-2, FDA PCCP, DORA, BCBS 239, ISO 42001, NIST AI RMF, and SOC 2. Operating partners close the loop on complex-fix remediation. Dark Factory is the proof: built on Forge, governed by Reign, live in production.
- What runs in production today, and what is being hardened with design partners?
- The Governed Tooling Layer runs in production. Forge AI Substrate has Agent Runtime Operations and MCP and Tool Operations in production; Foundation Model Access and Sovereign Control Plane are being hardened with a small set of Tier 1 design partners through 2026. Dark Factory is in production: iTmethods ships its own applications through it today, and a selective 2026 pilot cohort is open by application. See the Forge Roadmap below for current operating posture.
- Where can Forge run?
- Four deployment topologies. SaaS for customers whose data classification permits it. Dedicated Cloud (single-tenant Forge in an iTmethods-operated account). Customer Cloud (Forge inside the customer's own AWS, Azure, or GCP account, under customer keys). Air-Gapped for disconnected, classified, or sovereign environments. Same architecture, same evidence model across all four.
- Who buys Forge?
- Platform Owners, VPs of Engineering, CTOs, and Heads of Developer Productivity buy the Governed Tooling Layer. CTOs, Heads of AI, CISOs, and CAIOs buy Forge AI Substrate. CTOs, VPs of Engineering, and engineering leaders ready to run governed autonomous software delivery adopt Dark Factory. Each component is independently buyable.