ARC
Pricing
Discord
Talk to an engineerStart free
Start free
ARCby FenxLabsCollective Intelligence

Platform

  • How it works
  • Custom routing and governance
  • Use cases
  • Example architectures

Deployment

  • Hosted Platform
  • Managed Service
  • Self-hosted Licence
  • For ISVs
  • Open the portal

Services

  • Assessment and planning
  • Architecture and integration
  • Model Adaptation
  • EU AI Act readiness
  • Managed Service operations

Resources

  • Cost modeller
  • Compare approaches
  • Pricing
  • FAQ
  • Transparency
  • Get started
  • Discord community

Legal

  • Privacy notice
  • Terms and conditions
  • Sub-processors
  • Accessibility

For individuals

  • FenxChat

FenxLabs. KvK 91762782.

Herengracht 320, 1016 CE Amsterdam, Netherlands

+31 85 060 5273contact@fenxlabs.ai

© 2026 FenxLabs. All rights reserved.

See where FenxARC™ sits in your AI stack

ARC places one multi-model control plane between users, applications and agents and the approved models, tools and data they may reach. These five patterns show where policy runs and what crosses each boundary.

Talk to an engineerStart free

Every pattern keeps ARC between the caller and the resources its active list permits. Arrows show permitted paths. Dashed outlines mark trust boundaries. Every tool call returns to ARC.

Compare five governed AI architectures

Each pattern starts with a different production constraint. One organisation may run several at once, with a separate policy and boundary for each workload.

The five reference architectures compared by operating pressure, where the trust boundary sits, and what each one changes.
ArchitectureThe pressureWhere the boundary sitsWhat changes
Architecture 01Multi-team AI access layerSeveral teams need different AI access.At the list assigned to that team or use case.Application teams stop owning provider-specific routing.
Architecture 02Agent access with bounded models and toolsAgents act in business systems under bounded model, tool, approved data and spend access.Between the agent runtime and the models, tools and data its active list permits.Resource access and spend are enforced outside the agent prompt. Reasoning and runtime remain outside ARC.
Architecture 03Hybrid AI for sensitive workSensitive work still needs strong capability without exposing the underlying material.Around the sensitive material, with only the shielded context crossing it.The external model receives only the context its step requires.
Architecture 04Resilient multi-provider productionProvider failure cannot break the product.At route policy, which orders the approved provider and private paths.Routing and fallback leave application code.
Architecture 05Private and air-gapped AISelf-hosted Licence onlyEverything must run inside your network.At the network edge, with no external destination in the route.Request data never crosses the network boundary.

See what crosses each boundary

Open the pattern closest to your environment. Each keeps the same ARC interface; the trust boundary and approved execution surface change.

How to read these

  • Application
  • ARC
  • Policy gate
  • Model
  • Tool
  • Data
  • Trust boundary

Arrows show the paths policy permits. Resource groups show approved choices. Tool calls return to ARC. Dashed outlines show trust boundaries.

Architecture 01

Multi-team AI access layer

+
Illustrative scenario

Several products, assistants and agents call ARC. ARC applies the active list and policy, then reaches only the provider models, private endpoints and tools that list permits.

Customer product
Internal assistant
Department workflow
ARCShared control point
Active list

Resources this list exposes

Provider models
Private endpoints
Approved toolsReturn to ARC
Change the list and both sides change: a different set of models becomes eligible and a different set of tools becomes available, from the same control plane.
Architecture 02

Agent access with bounded models and tools

+
Illustrative scenario

An agent submits work to ARC with an active list. ARC applies access and spend policy, then orchestrates only the models and tools approved for that list. Every tool result returns to ARC.

Agent runtimeUser or workload context
ARCOrchestrates
Agent list and policy

Approved for this agent

Reasoning model
Business system actionReturns to ARC
Knowledge accessReturns to ARC
  1. 01The agent invokes ARC inside one active list.
  2. 02ARC applies access, privacy and limits before execution.
  3. 03ARC calls only the models and tools that list exposes.
  4. 04Each tool returns its result to ARC before the route continues.
For agents, ARC controls the models, tools, approved data access, policies and spend available to a request. It does not control the agent's reasoning, planning loop, application logic, runtime or business accountability.
Architecture 03

Hybrid AI for sensitive work

+
Illustrative scenario

Inside the trust boundary, the application reaches ARC and its privacy policy. ARC calls trusted handling tools and a trusted model. Outside the boundary, one external model receives only the shielded context needed for its part.

Your trusted environment

Sensitive workflow
ARCOrchestrates
Privacy policy
Trusted modelInside
ShieldReturns to ARC
RecombineReturns to ARC
External modelShielded context only
  1. 01ARC classifies the request under your privacy policy.
  2. 02Sensitive material is handled inside the trusted environment.
  3. 03ARC builds the minimum context required for the external step.
  4. 04The external model contributes its result to ARC.
  5. 05ARC recombines the answer inside the boundary.
The external model receives only the shielded context needed for its part of the task.
Architecture 04

Resilient multi-provider production

+
Illustrative scenario

A production application calls ARC. ARC applies route policy and request-time limits, then selects from an ordered set of approved provider or private model paths.

Production application
ARCPer-request routing
Route policy and limits

Ordered approved paths

Provider route APreferred path
Provider route BNext path
Private endpointWhen policy permits
  1. 01ARC builds the permitted routes for this request.
  2. 02The active objective orders those routes.
  3. 03When a provider fails, the request takes the next path you set.
  4. 04The application keeps the same ARC interface.
Change which model answers a workload without changing the application that calls it
Architecture 05Self-hosted Licence only

Private and air-gapped AI

+
Illustrative scenario

One customer network boundary contains the application, self-hosted ARC, policy, locally hosted models, approved tools and connected storage. There is no external path.

Your network. No external path

Application
Agent workflow
ARCSelf-hosted
Policy
Language modelYours
Machine learningYours
Approved toolReturns to ARC
Connected storageBehind ARC
On the Self-hosted Licence, ARC request handling runs inside infrastructure you control. Air-gapping is inherent to self-hosting, not an upgrade.
See how a request is handledChoose where ARC runsEmbed ARC in your software

What a design review settles

What crosses which boundary is decided in the design and written down before anything is deployed. We do not assume it.

How we connect it to your stack

Map ARC into the stack you already run

Thirty minutes with an engineer. Your numbers. A straight answer.

Talk to an engineerStart free