Automate the routine. Approve what matters. Report on all of it.
Reporting, capacity planning and guided client onboarding for the team, with Apex Onsight's agentic workflows and human approval gates built in, all behind one sign-in.
Get started
Sign in with your organisation's Microsoft Entra ID account.
Single sign-on. Your access depends on your groups.
How it works
1. Build a playbook
Compose tool calls, agent decisions and approval gates into a workflow, then schedule it or trigger it on demand.
2. Agents and people decide
Agents handle routine judgment. Anything high-stakes waits for a human, with the full context in front of them.
3. Report on outcomes
Results land in the reporting dataset, so dashboards and capacity planning stay current without spreadsheets.
Wintermute
AI assistants for the team, through the ACD Claude gateway
Assistants for each job
Pick an assistant set up for a use case, with its own instructions and tools.
Grounded in your data
Assistants can look up reporting and capacity data, but only data your role can already open.
Signed in as you
Connect your own gateway identity once. Your model access and spend limits apply, and conversations stay private to you.
What's inside
One place to automate, approve and report on your operations.
Reporting dashboard
Query reporting data in S3 Tables, and upload CSVs straight into the dataset.
Capacity planning
See team capacity and utilisation at a glance to plan ahead.
Client onboarding
Rincewind walks you through onboarding a client to APEX: pre-reqs, a second-person approval, the pipeline run, secret rotation and a verify run.
Role-based access
Map Entra ID groups to roles, and control which roles can open which pages. No redeploy needed.
Agentic workflow runs
Run playbooks as DAGs that mix deterministic tool calls with AI-agent judgment, and follow every step live.
Human approval gates
Approvals are a first-class step type. Review the agent's reasoning, then approve or reject before the workflow continues.
Governance and audit
Every run, decision and deployment is recorded, along with every RBAC change and CSV upload.
Secure by default
Single sign-on
One Entra ID session covers both apps, and signing out ends it everywhere.
Least privilege
Group-based roles in each app. Pages, links and actions are enforced on the server.
Private by design
Workloads and data sit in private subnets behind a WAF-protected load balancer.
Fully audited
Approvals, onboarding runs, RBAC changes and data uploads are logged with who did what, and when.