Governed OT → IT operations

The governed operating layer for enterprise operations.

From the plant floor to the back office, Tokoaido discovers the real processes across your machines and business systems, then runs them with AI digital workers, under human approval, earned autonomy, and a tamper-evident audit trail. Neutral, secure, and deployed in your own cloud.

Enterprise-grade & secure by designSOC 2-readyISO 27001-alignedGDPREU AI Act-readySSO / SAML
OT · PLANTIT · BUSINESSCoolant Pumpvibration risingCuring Ovenzone 152°CCNC Millspindle loadCMMSwork orderERPmaintenance costCRMSLA riskGoverned coreapprove · gate · audit
Built for regulated, asset-heavy operationsManufacturingEnergy & UtilitiesLogisticsPharma & Life SciencesIndustrials
The platform

Everything else automates. Tokoaido can prove what it did.

Automation is the easy half. The half that decides whether it survives an audit — who approved it, on what evidence, and what happened next — is the half we built first.

Governed execution

Nothing consequential happens without a person

Every action that changes something outside the platform stops for a named human. Approval is a gate in the workflow itself, not a policy document somebody signed.

Release the payment run

9 invoices · €412,000

High
ApproveRejectwaiting on a person
Evidence

A record you can hand an auditor

09:14:02Dana W.approved · payment run
09:14:02worker:ap-01posted 9 invoices
09:12:55worker:ap-01matched PO ↔ invoice
Earned autonomy

Trust that is measured, not assumed

Suggests100%
Acts with approval72%
Acts alone, in scope34%

Autonomy is earned on a record of correct decisions, not switched on at purchase.

One canvas

The plant floor and the back office, in the same workflow

A setpoint on line 3 and the invoice it eventually becomes are one process. Tools that see only IT model half of it and call that the whole.

Line 3 oven
MES
ERP
Finance
Copilot

Describe it. It checks before it builds.

It searches what you actually have connected, shows you the plan before writing a node, then runs the result in a sandbox — so “this works” means it ran.

groundedplan firstvalidateddry-run
Neutral by design

Your systems stay the system of record

Nothing migrates. Your CRM, ERP, MES and historian stay authoritative; the governed layer sits on top and runs in your own cloud.

Discovery

The process as it runs, not as it was drawn

Confidence is a measured score over real evidence in your data — a join, not a language model’s guess.

See how each piece works

The gap

Everyone shipped an agent. Nobody governs the whole operation.

Your work doesn't live in one system, it runs between the plant floor and the back office. But the tools you're sold each see only their half, and each governs only its own agents. The seams are where the value leaks, and where autonomy gets scary.

IT platforms can't see your machines.
Process mining, RPA and copilots stop at the ERP. The sensor data that predicts the failure never reaches the workflow that prevents it.
OT platforms can't touch your business systems.
Machine-health tools raise an alert, then hand a human a PDF. Nothing closes the loop into the CMMS, the ERP, or the P&L.
And every agent is governed only by its own vendor.
Guardrails on by default is not the same as earned, auditable, cross-vendor control.
40%+

of agentic-AI projects will be scrapped by 2027, Gartner, 2025, largely because they can't be trusted, governed, or proven in production.

Tokoaido is built for the opposite outcome: autonomy that is earned, execution that is governed, and results that are proven, continuously.

Why Tokoaido

Three things no one else is selling.

01

Plant floor to back office

One mesh spans OT and IT. A machine's vibration signal can become a governed CMMS work order, sensor to business action, end to end. No IT-only or OT-only vendor closes this loop.

Live OPC UA + MQTT Sparkplug ingestion → discovered process → governed action

02

Neutral, not walled

We don't relocate your work into our estate. Your CRM, ERP, MES and historian stay in place and authoritative, Tokoaido reads them, normalizes to open standards, and governs the execution on top.

Vendor-neutral connector mesh · your systems remain the system of record

03

Autonomy that's earned

Trust isn't a checkbox. Every agent earns authority from a measured track record, advisory → supervised → autonomous, and is demoted the moment reliability drops. Backed by a tamper-evident ledger.

Progressive authorization + an eval & regression scoreboard that never stops running

The closed loop

Not advice. A verified action, with a hard safety line.

Incumbents advise; a human executes; nobody checks the outcome. Tokoaido runs the whole loop and proves it, while a boundary you cannot configure away keeps agents off the Safety Instrumented System and off the PLC.

Sense
Live telemetry + system events
Diagnose
Graph-grounded root cause
Propose
A specific governed action
Approve
Human-in-the-loop, risk-tiered
Execute
Via MES / SCADA, never the PLC
Verify & learn
Keep it if it worked; roll back if not

Safety is not a setting. Writes route through MES/SCADA with human approval. A direct PLC write, or any interaction with the Safety Instrumented System, is blocked by construction, no prompt, policy, or agent can override it.

How it works

From disconnected systems to a governed operation, in five moves.

01
Connect

Point us at your systems, SaaS, ERP, HR, databases, and the plant floor over OPC UA / MQTT Sparkplug / MTConnect. Manifest-driven, not months of integration.

02
Discover

We normalize everything into a living knowledge graph and mine the real, as-run processes across machines and business systems, with conformance and bottlenecks.

03
Recommend

Get automation opportunities ranked by ROI and risk, the ones you can't see because they live in the seams between systems.

04
Govern & execute

Deploy AI digital workers that act through scoped tools, gated by risk-tiered approval, starting in a sandbox. Every action is written to an immutable trail.

05
Verify & learn

Measure the outcome, keep what worked, roll back what didn't, and feed the result into the ledger that earns each agent its autonomy.

Proof, not adjectives

The reason your agent program won't be canceled.

We prove the agents, and keep proving them.

Every agent runs against golden scenarios, including the negative cases where agents regress. A hard invariant blocks any unsafe action, and a regression gate blocks any drop below baseline. Continuously.

Ask why. Every answer is tamper-evident.

Each recommendation carries a hash-chained lineage, the telemetry, the transform, the model, the decision. Edit any input and the artifact hash breaks. Replayable, auditable, court-ready.

Trust, measured, not asserted.

Authority is earned from a real track record and revoked when reliability drops. No agent is autonomous on day one; the ledger decides, and you can see exactly why.

0
connectors in the catalog (IT + OT)
0
agent tiers, sensing → orchestrator
0%
golden eval scenarios passing
0
agent paths to the safety system
Security & trust

Enterprise-grade, and governed from the ground up.

Because agents act on real systems, every capability was designed around identity, approval, evidence, and an audit trail that holds up. Governance is the substrate, not a feature bolted on, the accelerant to deploying autonomy at enterprise scale.

SOC 2-readyISO 27001-alignedGDPREU AI Act-readyHIPAA-readyNIST AI RMF
SSO, SAML & SCIM

Enterprise identity out of the box, SAML / OIDC single sign-on and SCIM provisioning, with Owner / Admin / Operator / Viewer RBAC.

Encryption & isolation

Encrypted in transit and at rest, strict tenant isolation, and session tokens held in HttpOnly cookies, never exposed to the browser.

Immutable audit trail

Every sync, proposal, approval and execution recorded to a hash-chained, tamper-evident log, replayable for any auditor.

Governed by construction

Risk-tiered human approval, least-privilege agent scoping, and a safety boundary agents cannot cross, never a direct PLC or SIS write.

Data residency & neutrality

Your systems stay the system of record. Choose your region; your operational data does not have to move to us.

Compliance-as-code

Controls mapped to EU AI Act, NIST AI RMF, SOC 2 and GDPR, with evidence generated from the platform itself, not a spreadsheet at audit time.

Deploy where your data must live.

From managed SaaS to fully air-gapped, the platform runs on your terms.

SaaS
Managed multi-tenant
Private cloud
Your AWS / Azure / GCP VPC
Self-hosted
Docker / Kubernetes, on-prem
Air-gapped
Isolated / regulated networks
The landscape

Advisory tells you. Walled gardens relocate you. We run it.

Three ways to meet the operations problem. Only one understands the process and runs it across the systems you already own, neutral and governed.

Capability
Advisory
Celonis · ARIS
Walled garden
SAP · ServiceNow · Salesforce
Tokoaido
Neutral · governed
Sees OT (machines) and IT (systems)
Runs the work, not just advises
Your systems stay authoritative
Vendor-neutral
Autonomy is earned, not default
Tamper-evident provenance
Hard safety boundary (never the SIS)

Positioning framework; vendor placement reflects each category's primary marketing stance (reviewed 2026). = partial.

In practice

One platform, read by four very different people.

Plant & reliability

Predictive maintenance that actually files the work order.

Rising vibration crosses an ISO alarm → the failure is localized on the asset graph → a governed CMMS work order is raised and verified. Not a dashboard, an action.

COO & operations

Discover the process, then automate the seam.

Mine the real as-run onboarding, invoice or claims flow across systems, then deploy a digital worker for the handoff nobody owned, ROI and risk quantified up front.

IT & automation CoE

Let a domain expert build a governed agent, no code.

Author an agent from a signal, a finding and an action; dry-run it on live telemetry; publish it at advisory where it earns autonomy from its track record.

CISO & compliance

Roll out agents you can defend to an auditor.

Progressive autonomy, an approvals inbox, and tamper-evident provenance turn 'the AI did something' into evidence mapped to EU AI Act and SOC 2 controls.

Get started

Start with one process. Prove it. Scale from there.

We're onboarding a select group of enterprises and mid-market manufacturers as design partners. You bring one high-value process; we bring a governed platform, prove it end-to-end, and scale from there.

Start here

Operations X-Ray

Free

Point us at your systems (or a data extract). Get back your real, as-run processes, a machine-health snapshot, and automation opportunities ranked by ROI and risk.

  • Cross-system process map
  • OT + IT, one picture
  • Opportunities by ROI + risk
  • No commitment
Book your X-Ray
Most impact

Design Partner

Early access

We turn the connectors live for your stack and co-build your first governed digital workers. Outcome-based, you pay for verified results, not seats.

  • Live connectors for your systems
  • Governed digital workers
  • Earned-autonomy rollout
  • Direct Slack / Teams line
  • Outcome-based pricing
Apply to partner
Regulated & at scale

Enterprise

Custom

For regulated, asset-heavy organizations that need enterprise identity, data residency, deployment control, and contractual SLAs.

  • SSO / SAML / SCIM
  • Private cloud, on-prem / K8s, air-gapped
  • SOC 2 evidence, DPA & security review
  • Dedicated CSM + solutions engineering
  • Uptime SLA & priority support
Talk to sales
Questions

Straight answers.

What is Tokoaido?

A vendor-neutral, governed operating layer that sits on top of the systems you already run, SaaS, ERP, HR and the plant floor. It discovers your real processes, recommends automations, and deploys AI digital workers that execute the work under human approval, earned autonomy, and a tamper-evident audit trail.

How is this different from process mining like Celonis?

Process mining tells you what your process looks like, then hands it to a human. Tokoaido discovers the process and runs it, across OT and IT, with governed digital workers and verified outcomes. Understanding is the start, not the deliverable.

How is it different from ServiceNow or Salesforce Agentforce?

Those are walled gardens: they relocate the work into their own estate and govern only their own agents. Tokoaido is neutral, your systems stay in place and authoritative, and it governs execution across vendors, with autonomy that is earned rather than on by default.

Does it really connect to plant-floor machines?

Yes. It ingests machine telemetry over OPC UA, MQTT Sparkplug B and MTConnect, derives the as-run process, and can turn a machine condition into a governed business action, for example, a rising vibration signature into a CMMS work order.

Can an agent touch a PLC or the safety system?

No, by construction. Writes route through MES/SCADA with human approval. A direct PLC write, or any interaction with the Safety Instrumented System, is blocked in the architecture. No prompt, policy or agent can override it.

What does 'earned autonomy' mean?

No agent is autonomous on day one. Each earns authority from a measured track record, advisory, then supervised, then autonomous, recorded in a tamper-evident ledger, and is demoted automatically when reliability drops.

Is it vendor-neutral? Do I have to move my data?

Neutral by design. Your CRM, ERP, MES and historian remain the system of record. Tokoaido reads them and governs the execution on top; it can be deployed in your own cloud or on-prem via Docker or Kubernetes.

How does it help with compliance?

Governance is the substrate, not a feature. Controls map to EU AI Act, NIST AI RMF, SOC 2 and GDPR, with evidence generated from the platform itself, a hash-chained audit trail, RBAC, tenant isolation, and human-in-the-loop gates.

Is it production-ready today?

We're in a design-partner phase with a fully working, explorable product. There is a live, seeded demo you can enter now; production deployments are onboarded with design partners as we turn connectors live for each stack.

See your operations on one governed mesh.

Book a working session with our team, or start with a free Operations X-Ray of your own systems. Explore the live platform any time.