GatewayEnforcer sells enforcement software for the AI your people and your machines already use — sanctioned or not. Every product deploys inside your own Azure tenant, ends every unit of work with a signed Certificate of Incineration™, and is built by a company that is structurally incapable of seeing your data.
Heaviside AI builds AI enforcement software. It deploys inside your Microsoft Azure tenant, governs the AI your people and your machines use, and produces a signed Certificate of Incineration™ proving what each run was permitted to do and how it ended. The market calls the problem Shadow AI when machines run unsanctioned and BYOAI when people do; we enforce at the execution layer — the only layer that can prove anything — because browser controls cannot attest what happened server-side and network monitoring cannot see contents. We operate no servers in your data path, hold no keys, and retain no session content. We never see your data. Heaviside AI, LLC · Mesa, Arizona · Denver, Colorado · inventor of record: Steve McKim.
One door in front of your AI traffic, deployed into your own Azure subscription. Every call leaves signed evidence in your tenant, and on the Pro plan the call record is kept in storage you own. Every plan is on Azure Marketplace →
Deadline-enforced sessions for the AI traffic your applications, services and workloads already send — same models, same prompts, same apps. An Ed25519-signed Certificate of Incineration™ on every session. Five plans, one gateway: Pro keeps the call record; Financial, Federal, EU and AU carry the posture their buyers require.
Deploy from Azure Marketplace into your own subscription — your Key Vaults, your managed identities, your network. Every call crosses one door, and every crossing is signed at the boundary with Ed25519 keys that live in your tenant. Verify the resulting Certificate of Incineration™ yourself, offline, with the standalone verifier — every hash recomputed, every signature checked. Nothing runs on Heaviside AI infrastructure.
Clause-by-clause coverage, no form required. In-tenant execution answers GSAR 552.239-7001(c)(1); volatile-only processing with SDIP-6™ six-pass overwrite answers (c)(2); the Certificate of Incineration™ answers (c)(3); and a subpoena to us returns nothing, because we structurally possess nothing — (d). We never claim compliance or accreditation on your behalf; we hand you the architecture and the evidence, and the legal conclusions belong to your counsel.
GSAR 552.239-7001 coverage sheet (PDF) →
GSAR 552.239-7001 clause-by-clause crosswalk (PDF) →
Presidential AI doctrine crosswalk (PDF) →
EU AI Act crosswalk — Regulation (EU) 2024/1689 (PDF) →
Full compliance treatment →
Founded in Mesa, Arizona. The entire product line — protocol, enforcement architecture, and every shipped application — has one inventor of record: Steve McKim, Founder & CEO.
U.S. Provisional Applications 64/042,610 and 64/068,643, covering the SDIP-6™ protocol and the Certificate of Incineration™ architecture.
Published on Azure Marketplace under publisher ID heavisideaillc1772172689099, transactable including via Multiparty Private Offer. Azure-exclusive by design: the enforcement architecture is built on tenant-resident Key Vaults and managed identities.
Certificate NIA-20260708-9090E074: a live session destroyed and independently verified in 84 seconds, 8 of 8 checks passing — the destruction claim re-proven from the artifact alone, without reference to the vendor.
Procurement runs through your Microsoft Professional or Cloud Partner, or directly via Azure Marketplace. For private offers, evaluations, and compliance questions: steve@heavisideai.com — Steve McKim, Founder & CEO. Or use the request form above.