The StromaOS product architecture

Intelligence Modules on one governed operating system.

Sixteen domain Intelligence Modules. Two cross-cutting evidence capabilities. One governed execution system underneath - the Shared Semantic Data Layer, the Governance Spine, Evidence Data Trace, human authority, and four deployment postures across the pharmaceutical lifecycle.

What we have to offer

Three parts. None of them is the product on its own - a workforce without governed execution is a generic agent platform, and governed execution without your data and your authority is somebody else’s system.

One - the work

Performed, not tooled.

Biostatistics, medical writing, regulatory, safety and HEOR executed end to end by governed specialists you scale without hiring, built for pharmaceutical work rather than adapted to it.

Two - the proof

Proven while it runs.

Policy is evaluated before a task is dispatched, not reviewed after it lands, and every result arrives with the evidence record that defends it.

Three - the authority

Under your authority.

Your data and your models, deployed where you choose - managed, in your VPC, embedded, or air-gapped - with every decision right resolved to a named person in your organization, never to the platform.

Product model

Buy the domain capability you need. Inherit the same operating system underneath.

Each intelligence module can be activated independently. As modules are added, the organization gains more value from the Shared Semantic Data Layer, Knowledge Management, the Governance Spine, reusable skills, agents, evidence objects, and lifecycle context.

Intelligence Modules16

Selectable domain modules across discovery, development, safety, regulatory, access, medical, and quality.

Cross-cutting2

Knowledge Management and Evidence Generation Planning span the full lifecycle.

AI architectureMethod routing

Analytical, statistical, machine learning, local AI, hosted AI, human review, and panel of experts - the right method for each task.

Execution modelGoverned

Every task runs inside explicit evidence, policy, quality, human authority, and traceability controls.

Intelligence Modules

Sixteen Intelligence Modules across the pharmaceutical lifecycle.

Each module has its own operating model, evidence context, domain workflows, agents, methods, quality controls, decision authorities, and measurable outcomes. They are described here in one place rather than across sixteen pages.

The sixteen StromaOS Intelligence Modules, from Target Mechanism Intelligence through Medical Information and Scientific Communications, all converging on one governed system, with Knowledge Management and Evidence Generation Planning running across every one.

Modules are bought and activated one at a time. What they share underneath - the Shared Semantic Data Layer, the Governance Spine, Scientific Compute and the Evidence Data Trace - is the same in every one.

StromaOS

The shared product layer underneath every module.

Every Intelligence Module runs on the same governed execution system. That means new modules inherit the same execution, governance, evidence, data, and deployment controls rather than creating another application silo.

Execution

Agents, fleets, workflows, and decision packages

Compose domain work from governed agents, workflows, skills, reports, forms, methods, quality gates, and human review.

  • Agents organized into Fleets
  • Lead, worker, and sentry roles
  • Reusable governed skills
  • Decision-ready outputs
Intelligence

Method routing

Route each task to the appropriate method rather than using an LLM by default.

  • Analytical and statistical
  • Machine learning
  • Local scientific AI
  • Hosted AI, human, expert panels
Semantics

Shared Semantic Data Layer

Connect domain systems through common entities, ontologies, definitions, temporal context, and semantic mappings.

  • 43+ ontologies
  • Knowledge graph + vector retrieval
  • Common data model
  • Mapped in place, not migrated
Methods

Version-controlled and reproducible methods with validation evidence

Use governed statistical and machine-learning methods with preserved assumptions, diagnostics, reproducibility, and review - qualifiable for your intended use rather than declared validated for it.

  • 140+ statistical methods
  • 12 ML libraries
  • R harness and confidence rules
  • Golden datasets and quality checks
Integration

Tools, models, platforms, and data remain open

StromaOS is model-, tool-, platform-, and data-agnostic. Existing scientific tools and external models can be invoked as governed capabilities.

  • 360+ services and connectors
  • Hosted and local models
  • MCP servers and external tools
  • Customer-controlled data
Memory

Evidence and decisions survive every handoff

Every execution creates reusable organizational memory rather than another static output.

  • Evidence Data Trace
  • Versioned decision history
  • Approved content and analysis reuse
  • Lifecycle continuity
What ships in the catalog

850+ governed, executable definitions - before you write one.

Every module above is assembled from the same catalog. A definition is not documentation: it is the executable object the platform runs, carrying its own approval gates, decision rights and evidence contract. You inherit the catalog on day one and extend it, rather than starting from an empty system.

Governed definitions
The executable objects a Fleet runs
350+ SkillsOne callable capability an agent step can invoke 50+ ReportsSources and layout for a reviewable output
175+ ProcessesAn end-to-end governed process with its approval gates 40+ RulesetsDeterministic policy evaluated during execution
90+ AgentsWhat an AI agent does - its skills, trigger and steps 16+ Packaged FleetsA deployable unit - agents configured to run together
70+ Quality definitionsGates a run must satisfy to be complete 15+ FormsThe SME extension path, without a release
60+ Agent identitiesRole, values and boundaries - what an agent will not decide
Semantics

43+ ontologies

Clinical, safety, regulatory, genomic and laboratory vocabularies. Version-aware, license-checked, and mapped in place rather than migrated.

Statistical methods

140+ methods

Version-controlled and qualifiable for your intended use, executed against a pinned engine image so a result can be reproduced years later.

Machine learning

12 ML libraries

Pinned to exact versions and air-gap checkable, declared per skill rather than assumed present in the environment.

Ontologies, methods and libraries are what the definitions run on. They are counted separately and deliberately not added into the figure above - an ontology is an asset, not a governed definition.

The catalog is a starting position, not a boundary. Definitions are yours to fork, extend and author against on day one, and the count grows with each release without a migration on your side.
The Governance Spine

Every product inherits the same control architecture.

Governance is not a separate dashboard added after deployment. It is the execution layer that determines what can run, which evidence can be used, which models and tools are eligible, which quality conditions must be met, and who retains authority.

Review the governance architecture
01

Policy-as-code

Role, purpose, data class, jurisdiction, workflow state, model, tool, action, cost, and authority are evaluated before execution.

02

Human Authority Framework

Analyze, recommend, act, approve, publish, release, and submit remain separate permissions assigned to accountable roles.

03

Quality gates

Evidence completeness, method validity, reproducibility, confidence, unresolved uncertainty, exceptions, and review govern progression.

04

Evidence Data Trace

Inputs, methods, prompts, models, versions, policies, transformations, decisions, approvals, outputs, and actions remain reconstructable.

05

Governed external capability

Customer-built agents, internal applications, external models, scientific tools, and third-party services can operate inside the same control model.

Deployment

Deploy where the data, models, and operating constraints require.

Four postures. The product experience, the controls, the evidence record and the human authority model are the same in all of them - what changes is infrastructure, isolation, hosting, and who operates it.

Operated for you

Managed

We operate it. The fastest route to a first deployment, suitable where the data classification allows it.

  • Managed operations
  • Rapid deployment
  • Governed model and tool access
  • Boundary defined by your agreement
Your cloud account

Your VPC

Runs in your cloud account, inside your network boundary, under your identity provider and your controls.

  • Dedicated tenant
  • Your network boundary
  • Enterprise identity and security
  • Patient-level data stays inside
Where the data lives

Embedded

Deployed natively into the data platform you already run, so work executes where the data already sits.

  • Execution goes to the data
  • No parallel data estate
  • Your platform’s compute and controls
  • Highest-fidelity integration
Sovereign

Air-gapped

No egress, local models, controlled update path. For classified programs and jurisdictions that require it.

  • No external data movement
  • Local scientific models
  • Offline governed execution
  • Controlled release channel

Start with the module closest to a visible operating bottleneck.

Activate one Intelligence Module, connect the systems and evidence already in use, define the authority and quality model, and expand from the shared product foundation.