Put AI in production, not in another pilot

Describe the work in plain English. Ballet writes it as code your engineers review, and the workspace decides who is allowed to change it.

  • SOC 2 Type II
  • ISO 27001:2022
  • Role-based access
  • Approval gates
  • Encrypted secrets
  • Git-backed versions
  • Replayable runs
  • Bring your own models
  • Usage and cost visibility
  • Human in the loop

Get past what really stops a pilot

The model is almost never the problem. A pilot dies on the first question after the demo, which is usually whose API key it has been running on.

Fine in a pilot

  • One good run, on stage
  • A prompt somebody owns
  • Whoever built it, runs it
  • Screenshots of the happy path
  • An API key in a notebook
  • Whichever model was the default

What production asks for

  • The same work done on the run nobody is watching
  • Code your engineers can diff and approve
  • Roles that decide who can author and who can only run
  • Every run logged, and replayable step by step
  • Credentials the workspace holds, encrypted
  • A gateway you point at your own provider

Count on the same outcome every single time

Ballet's Composer is an AI coding agent that writes the playbook. After that the playbook runs as compiled code, not as an agent deciding again.

Tasks that ran the same way all eight times

Ballet 100%

54 of 54 tasks

Claude Sonnet 5 and GPT-5.6 78%

42 of 54 tasks

Time to finish one task

Ballet 0.08s

compiled, no live network

Claude Sonnet 5 and GPT-5.6 ~3.2s

about 40x longer

Model spend at 10,000 tasks a month

Ballet $0

no tokens once compiled

Claude Sonnet 5 and GPT-5.6 $67–$112

and climbing with volume

Read the benchmark →

Hand your review board what it asks for

Roles and approvals shipped with the first version.

Who can do what

Three roles, plus a setting for how much the AI does before it stops and asks you.

  • Owners hold billing, invites and API tokens
  • Builders author playbooks, connectors and secrets
  • Members run what they are granted and author nothing
  • Ask mode makes the AI propose every action for approval
  • Approval gates live in the workflow, so no route around them

What changed, and who approved it

Playbooks are code, so they go through the review your engineers already run.

  • Connect a collection to a Git repository
  • Changes land as pull requests your team reviews
  • Version history in the repo you already audit
  • Drift is surfaced when Ballet and the remote disagree
  • Any run replays step by step with the data it saw

Where your data goes

The Composer writes the workflow. It then runs as code, so live data moves through what your engineers signed off rather than through a model call.

  • Point the AI Gateway at your own provider account
  • Or use managed Ballet Models, with usage tracked
  • Secrets are encrypted and never shown again in plain text
  • Members cannot reach the Secrets page at all
  • Covered by Brainfish's SOC 2 Type II programme

Point it at your own model accounts

The gateway routes every AI request in the workspace. Point it at the OpenAI or Anthropic account you already pay for, and turn off the models you would rather nobody used.

  • Your provider, your contract

    Point the gateway at your own OpenAI or Anthropic account and the spend stays on the agreement your procurement team already signed.

  • Models you have approved, and no others

    Turn a model on for the workspace or leave it off. Builders pick from what is on.

  • What it cost, by playbook

    Usage is tracked per playbook, member, model and tool, so you can see where the bill came from.

Decide who is allowed to author

A Member runs the playbooks they have been given and cannot create one. The workspace enforces it.

Capability Owner Builder Member
Run playbooks Yes Yes Yes
Create and edit playbooks Yes Yes
Manage connectors and secrets Yes Yes
Manage agents, skills and tools Yes Yes
AI Gateway settings Yes Yes
Create API tokens Yes Own
Invite users Yes
Billing and plans Yes

Reach the systems you pay for, and the ones you built

Connectors for the systems of record, MCP for the rest, and a written-to-order integration for the service your own team built.

  • Salesforce
  • ServiceNow
  • Zendesk
  • HubSpot
  • Gong
  • Freshdesk
  • Slack
  • Stripe
  • + any API, database or MCP server

Before you roll it out

Can we use our own model provider?

Yes. The AI Gateway routes every AI request from the Console, agents and playbook steps, and you can point it at your own OpenAI or Anthropic account instead of Ballet's managed models. Owners and Builders configure it per workspace.

How do we stop someone shipping a workflow nobody reviewed?

Authoring is a role. Members can run the playbooks they are granted and cannot create or edit any. Connect the collection to Git and every change reaches production as a pull request your engineers approve.

What happens to our credentials?

They are stored as Secrets in the workspace, encrypted, and never displayed in plain text again. Steps reference them by name, so keys are not embedded in code, in the repo, or in shared run output. Members cannot access the Secrets page.

Does the same task always run the same way?

On the compiled path, yes — that is what a playbook is. On our published operations benchmark a compiled playbook did the work identically on 54 of 54 tasks across 8 runs each, where frontier models managed 42 of 54 on the same tasks.

Who supports a rollout?

Design partners get a specialist who builds the first playbooks with your team. Security reviews start at the Trust Center, where the SOC 2 Type II report, policies and subprocessor list are published: https://trust.brainfi.sh.

Bring the workflow security said no to

We'll build it on your systems in 30 minutes, and your engineers read every line before it runs.

  • SOC 2 Type II
  • ISO 27001:2022
  • GDPR Compliant