Each one stands alone.
Together they cover the whole enterprise.
The three products are peers, not layers. Buy one and it earns its keep on its own; add a second and the shared spine starts paying you back.
Ankura
The Enterprise Digital Fabric
Builds and runs every outward-facing surface your enterprise touches — web, mobile, search, workflows, and a full AI substrate.
Vizor
One Platform. Seven Dimensions.
Watches every packet, log, transaction, and control across enterprise IT and industrial OT, with compliance evidence as operational exhaust.
Kayak
Everything as a Service
Commands the physical world — every asset, SKU, rack unit, and unit of movement, metered and blockchain-verified.
Six things you decide, build, and audit once.
Everything below the product line is common. The products differ in what they observe and act upon, not in how they are governed.
Tenancy & isolation
A single tenant model with workspace isolation, resident data boundaries, and per-region residency rules. One tenant definition serves all three fabrics.
Identity & access
RBAC and ABAC with FIDO2 passwordless as the default for administrative surfaces. Roles granted in one fabric are legible to the others; joiners, movers, and leavers are handled in one place.
Evidence & audit
A tamper-evident, cryptographically signed ledger shared across products. Consent capture from Ankura, detections from Vizor, and custody entries from Kayak land in the same append-only store.
Interfaces
REST, GraphQL, and webhooks with shared conventions, pagination, error shapes, and idempotency semantics. Every capability is exposed through an API before it is exposed through a screen.
Intelligence
Shared model routing, prompt versioning, evaluation harnesses, and the option to run entirely on self-hosted open-weights models for sovereign deployments.
Cryptography
Post-quantum readiness inherited from UElement's U92 practice — TLS posture, certificate lifecycle, and key management designed for crypto-agility rather than retrofit.
What "One Control Plane" actually buys you.
Not a marketing phrase. Four concrete things you only have to decide, build, and audit once.
One tenant, one directory
A single tenant model, RBAC and ABAC, and FIDO2 passwordless access across all three fabrics. Adopt one product and the second inherits your identity architecture.
One audit trail
Compliance evidence from every fabric lands in the same tamper-evident ledger. One artifact satisfies digital, operational, and physical-custody obligations at once.
One topology decision
All three deploy air-gapped, on-premise, on sovereign cloud, hybrid-managed, or as hosted SaaS — on a single control plane, with no re-platforming between them.
One API surface
REST, GraphQL, and webhooks with shared conventions. An Ankura workflow can open a Vizor incident and trigger a Kayak fulfillment without custom integration.
What actually flows between the fabrics.
Concrete integrations, not a diagram with arrows. Each of these works without custom connector development.
Ankura feeds Vizor
- -Business KPIs and customer journeys instrumented natively — no separate agent deployment.
- -Consent capture, DPDP rights requests, and GDPR artifacts flow into the evidence plane.
- -Runtime application security and SIEM correlation cover every published property.
Ankura feeds Kayak
- -A checkout can call fulfillment; a support portal can initiate a recall.
- -Provenance widgets embed directly in commerce and support surfaces.
- -Warranty registration and service history surface as customer-facing flows.
Kayak feeds Vizor
- -Asset telemetry arrives as a first-class collection-plane stream.
- -Custody evidence merges with cyber evidence in one GRC ledger.
- -Physical and digital control drift are correlated on the same topology graph.
A two-hour workshop, then 5 days to something live.
We map your estate, pick the highest-value starting point, and put one thing into production on the deployment topology you choose.
Book a Demo