Platform · Architecture

How Studio, Guardian and Atlas fit together.

People work in Studio. Guardian checks every request before it runs, and Atlas grounds every answer in your own defined business — the same path holds whether the caller is a person or an agent.

One identity · one audit trail · across Studio, Guardian & Atlas

JUBI · ARCHITECTURE FIG.01 — CONTROL PLANE ONE IDENTITY · ONE AUDIT TRAIL JubiStudio THE WORKSPACE JubiGuardian THE GATE JubiAtlas THE GROUND
Fig.01 — one platform, three parts
One platform — three parts JubiStudio workspace + JubiGuardian protects + JubiAtlas grounds shared identity · shared audit · shared brand
The idea

Your newest hire isn't a person.

An AI agent shouldn't arrive with a master key. In Jubi it is brought on like any new analyst: the same six stations, the same checks, and the same record waiting at the end.

New analyst Day 1
Identity
Clearance
Workspace
Context
Tools
Oversight
AI agent Day 1
Identity
Clearance
Workspace
Context
Tools
Oversight
Identity · Clearance · Oversight Guardian Workspace Studio Context Atlas Tools governed connectors
How it works · in plain English

How a question becomes an answer you can trust.

No diagram degree required. Four steps — that's the whole idea.

01 · You ask

You ask

Anyone on your team, in plain English. No query language.

02 · Guardian checks

Guardian checks

Confirms it's really you, and only reaches the data your role allows.

03 · Atlas grounds

Atlas grounds

The answer is built from your agreed numbers — not a guess.

04 · You can trust it

You can trust it

A sourced answer, with a record of who asked — ready to show.

That's it. Guardian keeps it safe. Atlas keeps it true. The diagram above is for your architects — this is for everyone else.

Reference architecture · for technical reviewers

The full stack, top to bottom.

Every layer a request travels through — and the control plane that checks it on the way down and grounds it on the way back up. The diagrams above are the story; this is the blueprint.

Request descends the rail Answer ascends, grounded Guardian gates pulse on every request
01 Users & teams who asks
Employeesdaily users Analystsdata & BI Operationsworkflows Adminsgovernance
02 AI interface where work happens
Jubi Studionative workspace
Chatconversational Explorequery & drill Visualisecharts · boards Codepython · sql Artifactsfiles · exports Agentsmulti-step
Bring your own AIintegrated
ChatGPTOpenAI ClaudeAnthropic CopilotGitHub GeminiGoogle Internal AI appscustom
03 Control plane the governed centre
Guardian enforces · Atlas grounds · on every request
Trust boundary
Jubi Guardian03a · enforces
Request gate input-side
Input inspection Identity resolution Policy enforcement
Response gate output-side
Tool mediation Model routing Output validation
Jubi Atlas03b · grounds
Semantics & relations business sense
Business glossary Metric definitions KPI formulas Entity model
Scope & identity rich exploration
Project scope Data relationships
04a Exit enforcement Gated by Jubi Guardian · Grounded by Jubi Atlas
Web allow/deny Content sanitization Injection protection Action approvals Sandboxing
04b Execution surfaces where answers are sourced
Business data & warehouses Jubi Data / BInative analytics
02 · What each part does

Three parts. One job each.

The platform is deliberately split into three. Each part has a single responsibility, and none of them works alone.

How it deploys

Meet your team where they already work.

The same platform, three ways to put it in front of people — your analysts, your own customers, or your Microsoft Fabric tenant. Same control plane underneath every one.

Web app

For your analysts

Run Jubi as a web app for your team — the full Studio workspace, hosted as a managed service or in your own environment.

Embedded

In the products you ship

Embed Jubi in the products you offer your own customers, through Studio's builder — your brand on the surface, the same grounded answers underneath.

Microsoft Fabric

Inside your tenant

Bring Jubi into Microsoft Fabric for teams standardised there. Data residency and connectivity are scoped per engagement.

03 · For your reviewers

For your architects and security reviewers.

A few honest notes for the people who sign off: technical owners, security, and procurement. Where something is planned rather than shipped, we say so.

Identity is yours

Authentication runs through your SSO over OIDC. We map identity-provider groups to platform roles; we do not become your directory. Permissions are carried through the request, so the AI cannot see what the user cannot.

Audit and replay

Requests that route through Jubi are recorded (prompt, tool calls, queries, and results), so a request can be reviewed and replayed later. Coverage depends on the path; the per-request model sets out exactly what is and isn't in scope.

Checked in and out

Guardian's decisions apply on the way in and the way out, and there is no fast lane that skips the gate. Policy is applied server-side, not left to the model. We don't claim absolute prevention. We describe what is caught and what is mitigated elsewhere.

Deployment options

The platform runs as a managed service or in your own environment, and integrates with Microsoft Fabric for teams standardised there. Data residency and connectivity are scoped per engagement.

Bring this to your own architecture.

Book a demo and we'll walk your architects and security reviewers through the control plane — on your stack, with your identity provider and your warehouse.