Myra AI Workspace vs STACKIT

Colour-coded multi-model chat and projects

Employees work in a familiar chat and shared project workspace with model switching. Green marks Myra-hosted EU models, orange marks frontier models with PII masking, and red marks unmasked frontier use where administrators permit it.

PII masking and two-tier guardrails

Before prompts reach external providers, configurable guardrails can detect and replace personal data (names, emails, IBANs and similar) and block jailbreak or injection patterns. Tier 1 runs in-process; tier 2 optional sidecars add NLP PII and prompt-guard checks. Masking is skipped on wholly Myra-local legs because data does not leave Myra.

Myra EU model fleet with residency controls

Open-weight models such as Qwen (docs cite the current default Myra on-prem chat model) run on Myra's EU fleet without a BYOK key. Gateways can enable EU-region routing that returns HTTP 403 data_residency_blocked for non-EU routes, including post-dispatch host re-checks when the Myra router would overflow off-EU.

OpenAI-compatible AI gateway and BYOK

A unified compatibility endpoint resolves twenty-plus providers (OpenAI, Anthropic, Gemini/Vertex, Azure OpenAI, AWS Bedrock, Mistral and others). Admins store provider keys in an AES-256 vault, set fallbacks, exact-match response caching, and organisation/team/user budgets with hard enforcement.

Agents, workflows and MCP connectors

Documented agents support versioning, scheduling, webhooks and required approval before tool runs. Workflows include human-approval steps. MCP connectors attach external tools and data sources; the connector catalog documents Microsoft SharePoint, OneDrive and Graph with Entra OAuth.

Enterprise identity: OIDC, SAML and SCIM

SSO authenticates existing users via OIDC or SAML 2.0 (including Microsoft Entra ID) with domain allowlists. SCIM 2.0 on the admin API provisions and deactivates users and groups. Access can be limited by IP allowlist (IPv4).

Comprehensive IaaS: Compute and Storage

STACKIT's Compute Engine provides virtual machines and GPUs for workloads from general computing to AI training. Storage options include object for unstructured data, block for high-performance databases, file sharing, and automated backups. These run in EU data centers, offering low-latency access and scalability without vendor lock-in. Users benefit from predictable performance in regulated environments.

Managed Kubernetes and PaaS

The STACKIT Kubernetes Engine (SKE) deploys CNCF-compliant clusters with automated scaling and updates. Cloud Foundry supports application development and operations. Databases and messaging services like RabbitMQ integrate seamlessly. Developers focus on code while STACKIT handles infrastructure, reducing setup time and operational overhead for containerized apps.

Security and Observability Tools

Features like Secrets Manager, Key Management Service, and Network Security protect data at rest and in transit. Confidential Computing safeguards sensitive workloads. Logging via LogMe and Observability stack provide real-time insights. These tools ensure compliance and quick issue resolution, vital for industries facing strict audits.