New AI Workspace deployment option allows regulated enterprises and governments to govern LLMs, AI agents and MCP servers entirely within their own infrastructure, including air-gapped environments
WSO2 has announced that AI Workspace, its AI governance control plane, is now available as a fully self-managed capability within the WSO2 API Platform. The move enables enterprises and governments to establish a sovereign AI governance layer without relying on vendor-hosted components.
The self-managed AI Workspace allows organisations to govern employee access to external and sovereign large language models (LLMs) and Model Context Protocol (MCP) servers. It also enables internal resources to be exposed as MCP servers under common policy controls, while organisations can manage AI costs, quotas and chargebacks.
According to WSO2, the platform applies governance and guardrails across AI traffic flowing through its AI gateways, while keeping policies, routing and audit capabilities within the customer’s controlled environment.
“The launch of self-managed AI Workspace brings our SaaS capabilities to a 100% self-managed offering. With a 100% open-source foundation, our customers have the freedom to choose: SaaS, hybrid, or self-managed, without compromise.” — Derric Gilling, Vice President and General Manager, API Platform, WSO2
The new deployment option addresses growing sovereignty requirements among regulated organisations, particularly in financial services, healthcare, telecommunications and government. Customers can deploy the platform on-premises, in sovereign or national clouds, or on hyperscalers, with the option to operate fully air-gapped without outbound connections to WSO2.
AI Workspace was launched in March 2026 with SaaS and hybrid deployment options. The latest release adds a 100% self-managed model and is generally available through WSO2 API Platform, with deployment supported via quick-start installers, virtual machines, Docker and Kubernetes.
WSO2 said the offering supports its broader open-source and composable platform strategy, allowing customers to adopt AI gateway, API management, identity and integration capabilities according to their specific requirements.
