Platform in development — aPlanner MVP under validation (2026)

Technology & Security

Architecture that fits the fab's existing stack — and keeps production data where it belongs. aPlanner connects to MES, SAP and yield databases through read-only connectors; the AI core runs inside the fab network or in a private cloud; approved plans flow back only after planner sign-off.

Platform in development
On-prem / private cloud first
Data never leaves the fab
AI recommends, people decide
ARCHITECTURE

Fits the fab's existing stack. Data never leaves the site.

MES · ERP (SAP) · yield / bin DB · planner spreadsheets
Data layer — aFlow · aConnect
AI core — aCore: forecast · optimize · simulate
Planner workspace — KR / EN UI · approvals
Back to MES / ERP — approved plan, live KPIs
In development

Deployment

On-premise or private cloud inside the fab network — no production data leaves the site
Air-gapped option for the most restrictive sites
SaaS on AWS Seoul for suppliers and SMEs
Kubernetes packaging — the same code everywhere
In development

Integration

Read-only connectors first: in-house MES, SAP ERP, yield / bin databases, Excel imports
Write-back of approved plans only after planner sign-off
Pre-built connectors: SAP, Oracle, MES — in development
Korean SI / MES partners for delivery
Roadmap

Security & governance

Role-based access control, SSO, full audit trail
Planner-approval workflow — AI recommends, people decide
Roadmap: SOC 2 Type II (2027–28), ISO 27001 (2028), K-ISMS (planned)
No employer code or data; synthetic fab data for all demos
TECHNOLOGY

The stack behind aPlanner

Proven open components, packaged once for on-prem, private cloud and SaaS.

AI / optimization
Python
FastAPI
OR-Tools / MILP
PyTorch
XGBoost
Data
PostgreSQL
TimescaleDB
Frontend
React (KR / EN)
TypeScript
Runtime
Kubernetes on-prem
AWS Seoul
Engineering
70%+ AI-assisted development
automated testing

Architecture principles

Fits the existing stack

Nothing is ripped out — connect to what the fab already has

Read-only first

Earn trust before any system writes back

Explainable

Every recommendation carries its trigger, constraints and KPI delta

Human approval

Planners approve, edit or reject in Korean or English

Portable

One Kubernetes package for on-prem, private cloud and SaaS

Observable

Logging, metrics and audit trail from day one

SECURITY & GOVERNANCE

Designed for the Korean fab's security review

Amoza holds no security certifications today. The controls below are part of the MVP design; the certifications are a dated roadmap, not a claim.

Access control

Role-based access control with custom roles; SSO (SAML 2.0 / OIDC)

Audit trail

Complete record of plan changes, approvals and model recommendations

Encryption

TLS in transit; encryption at rest inside the customer environment

Data residency

Production data stays on the customer site or in the customer cloud

Approval workflow

No automatic write-back — planners sign off before MES / ERP updates

Privacy

PII detection and governance via aData (roadmap)

Security roadmap

Roadmap

SOC 2 Type II

2027–28

Roadmap

ISO 27001

2028

Roadmap

K-ISMS (Korea)

Planned

Planned

Third-party penetration test

Before first production pilot (2027)

DEPLOYMENT

On-prem first. Cloud when it fits.

On-Premise

Korean fabs

Best for: Korean fabs — data never leaves the site; air-gapped option

Managed: Customer (with Amoza support)
Updates: Scheduled

Private Cloud

Best for: Fabs and large suppliers with their own cloud tenancy

Managed: Shared
Updates: Coordinated

SaaS (AWS Seoul)

Best for: Tier-1/2 suppliers, OSATs and SMEs

Managed: Amoza
Updates: Automatic

Questions about architecture or security?

There is no security team yet — the founder answers directly.

Founder & Representative

Nguyen Van Duong (Danniel Ng) · danniel@amoza.ai

Security questions

danniel@amoza.ai · +82 10-7785-2831 (Suwon, Korea)

Run the pilot inside your fab network

The 2027 pilot program starts with a paid Planning Readiness Assessment, then an 8–12-week pilot on one production line — deployed on your premises or in your private cloud.