One intelligence layer across your organization.
GrowLeafy Brain LIOS is one identity plane, one entitlement authority and one trust anchor, whether it runs on one desk or across an estate of machines. The sections below are the areas that plane covers.
What the layer covers
Each line says what the area does. Nothing on this page claims a price, a service level or a certification.
Identity
The canonical GrowLeafy ID, the same one every GrowLeafy client uses. There is no separate LIOS account to create or to reconcile.
Devices
Every machine is an activation with its own device key and a certificate issued by GrowLeafy. A slot can be released or revoked centrally, and revocation withdraws the authorisation without touching files on the machine.
Brain
The reasoning layer that runs on your machines and takes instructions in your own words. The free layer is the floor, and it does not expire.
AI Workforce
Capabilities run as workers on real machines under real authorisations. How much may run at once is set by the layer an account owns, not by the machine asking.
Skills
A skill is a capability with an entitlement attached. Installing one never grants it: what an account owns is answered by the server on every use.
QR
QR is part of the same company and the same identity plane, so an organisation does not end up with two accounts and two sets of records. This page claims no QR integration that does not exist yet.
Fleet
Many machines under one organization, each with its own certificate, so one compromised device is one device to revoke rather than a shared secret to rotate everywhere.
Geo
Location-aware work is a capability, not an assumption: nothing about where a machine is gets used unless a capability the organisation owns and has activated asks for it.
Security
Signed entitlements, a public trust anchor clients pin, short-lived signed downloads and revocation that takes effect immediately. Details are on the security page.
Audit
Authorisation decisions are recorded server-side, refusals included, with the reason attached. A refused download is a readable fact rather than a mystery.
Enterprise Control Plane
The administrative surface for an organization's identities, devices and entitlements, sitting on the same authorities as everything else rather than a parallel copy of them.
Air-gapped deployment
A machine with no network still has to be authorised. That is a deliberate trade, and it is stated plainly.
The free layer never expires
The free layer is not time-limited and does not depend on a network call to keep working. An air-gapped machine that has the free layer installed keeps it, with no package to renew and nothing that quietly stops.
What has to be arranged
Offline activation packages are issued per device and require a fresh MFA confirmation when they are created, so the package is bound to a device the organisation actually nominated. The compatibility page records what the air-gapped configuration supports.
Developers can read the activation endpoints on the developers page, and the public key is at the trust anchor.
Request enterprise access
Enterprise enquiries are handled by the support team, and there is no self-service enterprise signup yet.
The support team handles the enquiry and routes it; individual plans and their prices are on the pricing page.