Berry
Book a demo

[ SELF-HOSTED ]

[ SANDBOXED ]

[ YOUR MODELS ]

[ AUDITED ]

Private AI workspace · early access

The AI workspace your organization owns.

Agents that work with your files, tools and data. On your infrastructure, with your models, under your rules.

Book a demo Self-hosting: early access
Self-hosted or dedicated Google SSO & SCIM Bring your own models Every action audited
Berry
ai.acme.com

Compare our Q3 pricing with our three closest competitors and draft a note for the leadership team.

Worked for 5s

    100+

    tools the agent can use out of the box: files, shell, images, memory, schedules, web research and Google Workspace

    5hrs

    back per person each week on research, drafting and reporting

    70%

    lower AI spend per person than $60-a-seat subscriptions, with pay-for-use budgets

    <1day

    from a fresh server to your team's first task with Docker Compose

    [ 01 / 06 ] · Agents

    An agent that does the work, not just the talking.

    An enterprise-grade agent for every team. Ask in plain language and Berry plans, works through your files and apps, runs code safely and shows each step as it goes.

    Agent loop
    planning…
    Files Web Code Apps Images Memory

    Plans, acts and shows its work

    Berry breaks a request into steps, uses the right tool for each and checks the result, with every step visible as it happens.

    Durable runs
    worker-1running
    worker-2idle
    planreadsearchcodedraftanswer
    step 1 of 6 · saved to Postgres

    Never loses its place

    Every step is saved as it runs, so a restart or crash picks up exactly where it stopped.

    Sandbox

    Code runs in isolation

    A sandbox per task, paused between turns, with network access set by policy.

    Approvals
    $ python3 report.py
    waiting for approvalApprove

    Asks before it acts

    Commands and file changes can wait for a person to approve them.

    Scheduled
    MONTUEWEDTHUFRI
    Support digest · 08:00● running

    Jobs that run while you're away

    Daily, weekly, monthly or cron, in any time zone, each with its own history.

    Steer
    Which region should I start with?
    EMEAAsia PacificAmericas

    Stop, steer, continue

    It asks when it needs you. Redirect it mid-task or pick up where it left off.

    Files
    Q3 revenue by region table
    Renewal terms, p. 4 text
    Forecast sheet 4 tabs
    Signature page image
    Appendix.zip 12 files

    Reads the files you actually use

    PDFs, Word, Excel, PowerPoint, archives and images, up to 1 GiB each, previewed safely in the browser.

    Knowledge
    renewal terms for Northwind
    contracts/northwind-msa.pdf0.00
    notes/renewal-call.docx0.00
    finance/arr-2026.xlsx0.00
    memory · prefers tables0.00

    Grounded in what you know

    Hybrid search over project knowledge, plus private memory on your own servers.

    Connectors
    Drive
    Drive Gmail Calendar Sheets Slides MCP

    Your apps, under your rules

    Google Workspace and your own MCP servers, each set to off, read or full by an admin.

    Images
    1:1 · final0%

    Creates, not just writes

    Generate and edit images, read screenshots and charts, and follow your team's skills.

    [ 02 / 06 ] · Models & routing

    Bring your own models, or use Berry Router.

    Connect OpenAI, Anthropic, any OpenAI-compatible endpoint or models you host yourself. Berry decides which models each team may use and checks the budget before every request.

    Web & desktopchat
    Mobilepaired
    Schedulescron
    Service accountstoken
    Policy layer
    Finance · defaultberry/flagship
    Legal · allowedanthropic
    Research · on-premollama
    Vision defaultopenai
    Engineeringcompatible

    Model allow and block rules per organization, department or person. Budget checked first.

    Berry Routeraliases
    OpenAIresponses
    Anthropicmessages
    OpenAI-compatibleany host
    Ollama · LM Studiolocal

    No keys in the browser

    Provider keys are secret references on your server, and Berry only calls hosts you allow-list.

    Budgets before spend

    Daily or monthly limits in dollars, requests, tokens and sandbox minutes, for the organization, a team or a person.

    Models you host

    Point Berry at an on-prem endpoint when prompts must not leave your network. Embeddings run locally too.

    [ 03 / 06 ] · Governance

    Governed by your rules, recorded in your logs.

    Enterprise governance built in, not bolted on. Give everyone AI without losing sight of cost, data or risk: administrators set the rules once and Berry enforces them on every request.

    Allowances
    Organization · monthly$6,420 / $10,000
    Engineering · monthly$2,310 / $2,800
    j.lee · daily$3.10 / $8.00
    Sandbox minutes412 / 1,000

    Spend limits that hold

    Soft and hard limits with alerts at 80% and 100%. Over-budget turns are blocked before they run, and sandbox time is reconciled against what was used.

    Audit log

    A trail you can export

    Sign-ins, admin changes, approvals, phone pairings and reported responses, searchable and exportable as JSON or CSV.

    Roles
    Use connectors
    Run code
    Upload files
    Export audit log

    44 permissions, your roles

    Editable roles, departments, resource access and scoped service accounts.

    Identity
    Google
    Berry
    SCIM

    Access follows your directory

    Google Workspace sign-in, SCIM 2.0 provisioning and domain allow-lists.

    Alerts
    Spend vs. monthly limit● 80% alert sent

    Alerts before surprises

    Usage analytics, scheduled reports, and alerts by email or webhook.

    [ 04 / 06 ] · Security

    Isolation at every layer, not as an add-on.

    Tenants are separated in the database, code runs away from your servers, and secrets are sealed. Read the security overview.

    Row-level security, forced

    Every tenant table enforces Postgres row-level security, and services connect with least-privilege roles.

    Sandboxed execution

    Agent code runs in per-task sandboxes with resource limits and network egress set by policy.

    Secrets sealed

    Connector tokens are encrypted with AES-GCM under a dedicated key that can be rotated.

    Reportable answers

    Anyone can flag a harmful or wrong answer, and the report goes to your administrators' audit log.

    [ 05 / 06 ] · Deployment

    Runs where your data lives.

    Deploy inside your enterprise network or your own cloud account. Prompts, files, history and memory stay in your Postgres and object storage, and model traffic goes only to the providers you approve.

    Runs in your cloud
    AWS Azure Google Cloud On-prem 
    # one host, TLS included
$ cp deploy/.env.example deploy/.env
$ docker compose -f deploy/compose.yaml up -d
# api · worker ×2 · web · postgres · redis · minio · mem0 · tika · embeddings
    ■ your-network / berrydocker compose
    postgres · rlspgvectorredisminiosandboxescaddy tls
    SELF-HOSTED

    Your cloud or data center

    Docker Compose with automatic TLS, a Helm chart for Kubernetes, or a one-stack AWS template with SSM-only access.

    DEDICATED

    Managed for you

    A single-tenant instance we run for your organization, on its own database, storage and workers, at your domain.

    OPERATIONS

    Built to be operated

    Backups and restore scripts, Prometheus and Alertmanager, and deploys that rebuild only what changed.

    [ 06 / 06 ] · Everywhere

    Start at your desk, follow from your phone.

    The same projects and tasks on the web, the desktop app and the iPhone and Android app, all connected to your organization's own server.

    1. Open Berry on your computer and choose Get the mobile app.
    2. Scan the code. It works once and expires in two minutes.
    3. Approve the phone on your computer. Revoke it any time.
    Download on the App StoreComing soonGet it on Google PlayComing soon

    Web & desktop

    Browser, macOS and Windows.

    iPhone & Android

    Native, paired by QR code.

    CLI & extension

    Terminal and Chrome side panel.

    Berry on iPhone: projects and tasks in the sidebar.
    Berry on iPhone: an answer with a launch timeline table.

    ■ Questions

    Asked by security teams.

    Does any of our data reach you?
    Not when you self-host. Prompts, files, history and memory stay in your database and storage, and model requests go to the providers you configure. A dedicated instance we run is covered by your agreement with us.
    Which models can we use?
    OpenAI, Anthropic, any OpenAI-compatible endpoint (including routers and self-hosted servers like Ollama and LM Studio), or Berry Router. Administrators choose which models each team may use.
    Where does agent code run?
    In a sandbox per task, separate from Berry's own services. Administrators decide whether code execution is on, whether it needs approval and whether the sandbox can reach the network.
    How do people sign in?
    With Google Workspace single sign-on, or email and password limited to your domains. SCIM 2.0 keeps users and groups in sync with your directory.
    Is Berry open source?
    Open-source release coming soon. Early-access teams run it today with Docker Compose or Helm.

    ■ Enterprise

    Ready for enterprise IT, security and procurement.

    Everything an enterprise rollout needs, from single sign-on to spend controls, in one platform your team operates. Self-hosted or dedicated, with support from the people who build it.

    Single sign-onGoogle Workspace SSO with domain rules
    SCIM provisioningUsers and groups follow your directory
    Role-based access44 permissions, departments and resource rules
    Audit logsSearchable trail with JSON and CSV export
    Spend controlsBudgets per organization, team and person
    Model governanceAllow-lists and defaults for every model
    Data stays yoursYour database, storage and network
    Full API340+ endpoints and scoped service accounts
    30-minute walkthrough

    See Berry with your own work.

    A workspace set up for your organization, with your security, IT and procurement questions answered.

    Book a demo Security overview