Enterprise AI workspace

Open AI up to staff.Still run the place.

Employees start work from one entry point, without installing an environment, hunting for keys or picking a model. What each of them may use — models, agents, data — follows their project role. And every run lands on one ledger: who started it, and what it cost.

EachRun workbench with today’s to-dos, recent projects and one box to describe the work (demo tenant)
Employees start work in one place. Each execution remains attached to its project and owner.

Who uses it

Companies, public institutions and individuals run on the same platform

One set of workspaces, permissions and execution records underneath. A company wants AI doing actual jobs; a public institution wants the boundary settled first; an individual wants one place that holds the project and its history.

Companies

Put AI into specific jobs

  • Workflows break a job into steps and AI teams split it by role, so staff do not have to learn how to prompt first
  • A method that worked once becomes a template the next project reuses
  • Usage and cost land on a person, a project and a model, so you can see which team is getting value

Public institutions

Settle the boundary before the usage

  • Access control decides who may use which models, data and tools, and follows the person's role
  • Requests, approvals, login logs and execution records all leave a trail you can check later
  • Private or hybrid deployment covers a requirement that data must not leave your premises

Individuals

One place that holds the project, the files and the history

  • A workspace is a real machine with its own vCPU, memory and disk, not just a chat box
  • Files, context and output stay with the project, so another laptop picks up where you left off
  • Install the capability you need from the market instead of configuring an environment

Core value

Opening AI up takes three things at once

Miss one and AI stays where it is: a few people trying things on their own accounts. Hold all three and you can hand it to a department, then to the company.

One entry point

Nobody builds their own setup

Signing in drops an employee into the projects they may access. The runtime, the models, the agents and the keys are already configured. Work that used to live in personal accounts and personal laptops comes back into the project.

One set of permissions

You decide what AI may see and touch

Project roles set the models, tools, files and actions available. Agents that support permission prompts ask before running a tool or a command. Opening up access is not the same as opening up the boundary.

One ledger

Every run can be costed and traced

Who started it, which project, which workspace, which model, how many tokens and how much money — all on the same record. Enough to review the work, charge it back, or hand it to someone else.

You do not have to lock everyone into one AI tool. We manage the models, agents and workspaces that are already integrated and licensed. During a pilot we check interfaces, licensing and deployment conditions item by item.

What it looks like

The entry point, the permissions and the ledger, on screen

These are real product screens, and you can open each one full size. People, projects, agents, models and operating figures are replaced with demo data.

AI conversation records using demo labels, with status, token usage and completion time
AI conversation recordsSearch by user, workspace, project, model and status while retaining usage and completion time.
Agent access and web login settings using demo names
Agent accessAdministrators decide which agents may run in a workspace and whether web login is available.
Share center using demo labels for workspace, project, file and session access
Share centerWorkspaces, projects, files and sessions carry roles and an access lifetime.
AI governance dashboard filtered by user, workspace, project, engine, model, model source and run outcome, using demo figures
AI governanceFilter by user, workspace, project, engine, model and run outcome, then read tokens, active users, cost and user ratings for that slice.
AI usage attribution and run outcome dashboard using demo labels and shifted figures
Usage and run outcomesBreak usage down by workspace, project, user, runtime and model, then review completed, failed and interrupted runs.

How it lands

How AI work enters company control

Six steps, and a piece of AI work has an entry point, a boundary and a ledger entry. None of it is an extra approval layer; it is the path the employee was going to walk anyway.

  1. 01

    Enter a project

    An employee signs in through the platform and starts inside a project they may access.

  2. 02

    Request a workspace

    The employee requests an environment; an administrator reviews and assigns resources.

  3. 03

    Choose a capability

    The workspace exposes the models, agents, project files and tools configured by the company.

  4. 04

    Confirm before action

    Project roles limit access. Supported agents request approval before running tools or commands.

  5. 05

    Record usage

    User, workspace, project, runtime, model, status and token usage remain searchable.

  6. 06

    Share and hand over

    Projects, files and sessions can be shared by role and expiry, then revoked when needed.

One place to work, one place to manage it

The entry point, the permissions and the ledger live across these seven screens. Employees use the first four daily; administrators watch the last three.

Workbench

A clear next step from the first sign-in

Employees do not install an environment or track down keys. The workbench guides them through a workspace request, and they enter the project once an administrator approves it.

  • Request a workspace, an administrator approves it
  • Projects, running workspaces and remaining quota on one screen
  • Switch to the expert view when finer control is needed
Three-step getting started panel and the goal input box in a workspace
Three steps to start: pick a project, add the capabilities you need, describe the goal.

Workspace

Keep project files and context in one workspace

The workspace is the project's own environment. Files, context, tools and execution records live inside it, and a colleague can be added to the same workspace and continue.

  • A standard environment that does not depend on one person's laptop
  • Project files, context and execution records kept together
  • Several people in one workspace for collaboration and handover
Workspace interface with sessions, messages, apps and the capability market on the left and the current project on the right
The workspace carries its own sessions, messages, apps and capabilities; project files and history stay inside it.

Runtime

A workspace is a real machine, not just a chat box

Behind each workspace sit real vCPU, memory and disk quotas running on your own hosts. Administrators see what was allocated and what is actually in use, and can expose a service running inside a workspace by port.

  • vCPU, memory and disk allocated per workspace, with live usage on one screen
  • HTTP services inside a workspace can be opened by port; public access needs review
  • Existing servers can be attached and managed in the same resource view
Workspace instance page showing scheduling status and allocated versus actual CPU, memory and disk usage (demo figures)
Allocated, running quota and actual use side by side, so resource spend is visible.

Discover

Approved models and agents stay inside the project

Employees see only the capabilities connected by the company and allowed for the current project. They can switch models or agents without moving project files elsewhere.

  • The company connects models and agents once, not per employee
  • Availability follows role and project
  • Project context is kept when switching
Capability panel inside a workspace showing installed capabilities and what else can be installed, grouped by development, docs, design, productivity, AI teams and marketing
Capabilities are installed into the workspace, so people can see what is on and what else is available.

Share center

Reuse work that the team has already done

The team can publish prompts, task templates and processes to the share center. They remain available when people change roles or leave the project.

  • Prompts, task templates and processes become team assets
  • New projects start from something already proven
  • The method stays when people change
Project template library grouped by engineering, project management, product design, data analysis, sales and operations
Approved templates turn proven ways of working into assets the next project can reuse.

AI quota

Give every unit of AI usage an owner

Quota is assigned by user and plan. Employees see what remains, while administrators can review usage by workspace, project, runtime and model.

  • Set limits in advance instead of discovering spend later
  • Usage by person, workspace, project, runtime and model
  • Cost attributable to a project for internal allocation
AI quota panel showing the current plan, remaining quota, carried-over allowance and cumulative use (demo tenant)
Employees see what is left and how fast it is going, and can request more without leaving the product.

Admin console

Daily administration in one console

Administrators handle workspace resources, member access, model providers, approval requests and login records here.

  • Access control and roles decide who may use what
  • Model providers and keys held centrally, not scattered
  • Approvals, login logs and scheduled jobs in one place
EachRun administrator console overview with workspaces, agents, model access and tasks
Admin console: workspace resources, capabilities and models, tenants, projects and access.

On top of the core

Staff who cannot use AI can still follow the flow

The three things above decide whether you can open AI up at all. This layer decides whether people use it once you do: pick a workflow and follow it, or call in an AI team already split by role. Not required — but it sets how fast AI spreads inside the company.

Workflows

Pick a workflow and follow it

A workflow breaks the job into steps, and each step carries the skills that step needs. Starting one creates a visual workflow: nodes advance in order and the output is filed back to the project.

  • Every step states what it does and which skills it uses
  • Output is attached to the project instead of filed by hand
  • Switch to the expert view whenever you want to go off-script
A five-step workflow for running a cross-border storefront, with the skills listed under each step
From requirements to the pre-launch check: five steps, each with its skills attached.

AI teams

Bring in a team of agents split by role

The capability market holds AI teams packaged by function: academic research, design, engineering, finance, healthcare, marketing. Each team is split by role and carries the skills that kind of work needs.

  • Split by role, not one assistant expected to do everything
  • A team carries anywhere from a few to dozens of skills, ready to install
  • Teams and skills are maintained and distributed by the company
Detail view of the engineering AI team: 58 skills, each role listed with its own responsibilities
Fifty-eight roles inside one engineering team, each with its own identity, remit and workflow.

Current product scope

What works now, and what needs pilot confirmation

We separate ready-to-use functions from items that need on-site confirmation, so you can estimate the implementation work.

Available now

Day-to-day platform management

  • Members, departments, roles and login audit
  • Workspace requests, approval, instances and resources
  • Model providers, channels and connection tests
  • Quota plans, user quotas and usage windows
  • Project, workspace, file and session sharing
  • AI conversations, run status, tokens and user feedback

Configuration-dependent

Runtime controls

  • Read-only and project-write sandbox boundaries
  • User approval before tool and command execution
  • Viewer, editor and administrator project roles
  • Time-limited sharing and centralized revocation

Permission prompts differ by agent and are configured for the deployment in use.

Confirmed in pilot

External systems and environments

  • Specific models, agents and CLI integrations
  • CRM, ERP, ticketing and internal APIs
  • Private repositories, file systems and knowledge bases
  • Private deployment retention and network boundaries

Technical access is not the same as a stable interface or commercial permission. Each item is checked before delivery.

One set of permissions, in detail

You decide what AI may see and do

Before deployment, we confirm data boundaries, record retention and integration scope with your team.

  • One identity Employees enter through the platform account, and usage is attached to the actual user, project and resource.
  • Layered access Models, tools, files and permitted actions are controlled by role, project and workspace.
  • Central key custody Model providers and CLI credentials are configured and distributed centrally instead of living in personal environments.
  • Execution records AI conversations remain attached to the user, workspace, project, runtime and model, with status and usage available for review.
  • Requests and approval Workspaces, resources and capabilities are granted through an approval flow that leaves a record.
  • Deployment choice Where data may not leave the organization, private or hybrid deployment defines the boundary.

How far it reaches

Choose where it runs and how far it reaches

Start with one team, or plan for the whole company. The three core capabilities hold in any of these; what changes is where the data sits and who operates it.

SaaS service

Hosted by us and ready to use, for teams validating the value first.

  • No environment to build
  • Priced per user or per team
  • Extend to more teams at any time
Ask about access

Enterprise

For departments and companies past the trial stage, with the full directory, approval and governance set.

  • Organization, role permissions and approval flows
  • Execution records, login audit and multi-team budgets
  • CRM, ERP, ticketing and internal APIs calling AI through one entry point
Ask about scope

Private and hybrid

Run inside your own environment, or keep sensitive data internal while general work uses external models.

  • Your data center or private cloud, data stays in place
  • Internal and external models split by scenario, boundaries confirmed separately
  • Usage and execution records still read from one platform
Ask about deployment

Why the product is shaped this way

Your team still needs to know who started the work, what it used, what happened and where the output went.

We call that a finished run: the record stays with the project, someone owns the result and a colleague can pick up the work later.

Identity
Who or what started the run
Boundary
What data, tools and models it may use
Record
What happened during execution
Result
What was produced, and whether the run completed, failed or stopped

Prove one real task first

Pick work a team does every week. Run it for four to six weeks, compare it with the baseline, then decide whether to continue.

Discuss a pilot
Scope
One team and one or two recurring tasks
Period
Normally four to six weeks
Review
Compare the outcome with the baseline

What you receive at the end

  • Configured projects, access, models and execution resources
  • Task baseline, acceptance rules, usage and execution records
  • A before-and-after comparison to stop, adjust or expand with evidence

Pricing depends on team size, deployment, AI resources and integration scope.

The company behind it

  • Legal entityChengdu March Orange Intelligent Information Technology Co., Ltd
  • OfficeRoom 1307, Block B, Junxin Building, 288 Shuyue East Road, Jinniu District, Chengdu
  • Sales phone400-030-8696
  • Sales email[email protected]

What sets the price

  • ScaleNumber of users and teams
  • DeploymentSaaS, private or hybrid
  • ResourcesModel and execution resource usage
  • IntegrationWhich business systems need connecting

Common questions

What is EachRun?

An enterprise AI workspace. Employees enter the projects they may access from one entry point, project roles decide which models, agents and data they may use, and every run's usage and cost lands on one ledger, so the work survives a handover.

How is this different from personal AI tools such as ChatGPT or Cursor?

Personal AI tools are useful for individual work. We add shared project workspaces, company access rules, quotas and execution records, so colleagues can work together or take over later.

Do we have to replace our existing AI tools and business systems?

Usually not. We first inventory your models, knowledge bases, repositories and business systems, then confirm the integration scope during the pilot.

What can EachRun manage today?

Today you can manage members and roles, workspace requests and instances, model channels, user quotas, resource sharing and AI conversation records. Usage is searchable by user, workspace, project, runtime and model. Tool approval, sandbox boundaries and external integrations depend on the agent and deployment setup.

Does EachRun only retain logs?

Logs are one part of it. Project roles control access, quota windows limit consumption, and supported agents ask for approval before running tools or commands. Administrators can then search records by user, project, model and status.

Is private deployment supported?

Yes. Alongside the SaaS service, enterprise, private and hybrid deployments are available so data boundaries and model access can match your requirements.

Is it hard for employees to start?

Employees do not install an environment or configure keys. On first sign-in the workbench guides them to request a workspace, and they begin once an administrator approves it.

How are the pilot and pricing determined?

A pilot normally uses one engineering or IT team and one or two recurring tasks for four to six weeks. Time, rework, cost and results are recorded before the pilot and compared afterwards. Pricing depends on team size, deployment, model and execution resources, governance requirements and integration scope.

Start with one real AI task.

Tell us which teams use which AI tools, and what is hardest to manage across cost, access, handoffs or execution records.

Phone400-030-8696 Email[email protected]
WeCom WeCom contact QR code Scan to contact our business team