Heimdall: the gate every model passes through

Heimdall is the sovereign control plane between a healthcare application and every AI model it calls, frontier, open-weight, or Bifrost. One endpoint sits in front of all of them. In Norse myth Heimdall is the watchman who sees everything that approaches and decides who crosses; the product does the same for clinical AI traffic.

The problem nobody is pricing

Three things are true at once. AI features have unpriceable economics, token consumption per task is a variable cost inside fixed-price contracts. AI features break in sovereignty review, the OEM wins the clinical evaluation, then the AI is carved out at contract because it calls a foreign endpoint. And regulation has arrived, the EU AI Act and its successors demand logging, traceability and human-oversight evidence that neither hospitals nor most vendors can produce. All three are the same problem: nobody owns the layer between the application and the model. Heimdall owns it.

Four treatments, before a single token

Every request receives four treatments before a token is generated. Classify: what task is this, and what data class does it carry, verified by an on-gateway PHI detector. Govern: which models, in which jurisdictions, is this permitted to touch, policy read as sentences a governance lead can sign. Route: which supply serves it, at what cost envelope. Account: every token metered and every decision logged to an immutable ledger.

Sovereignty first, then capability, then cost

Residency is not a region toggle; it is the routing logic itself. A query from a Berlin hospital is answered inside German borders by an approved model, or it is not answered at all. Within that envelope Heimdall picks the right model for the task, and only then the cheapest compliant supply. Compliance outranks cost, always.

The span carries; the gate decides

Bifrost runs sovereign inference; Heimdall governs the traffic. A customer can deploy Heimdall on day one, in front of the frontier models they already use, and gain sovereignty controls and a full audit trail immediately. When workloads demand inference that never leaves the jurisdiction, Bifrost is already standing behind the gate. The gateway is how customers arrive; the bridge is where they end up.

Going deeper

The Heimdall page covers the request lifecycle, the residency tiers, Policy Studio and the pricing architecture in full.