Managed Paperclip: an AI agent fleet, governed by guardrails rather than trust
The open-source control plane for a fleet of autonomous AI agents (code, support, operations), operated for you in Europe. An instance dedicated to your organization, strict execution guardrails, and software you can bring back in-house.
What the managed service covers
Paperclip is an open-source control plane that runs a fleet of autonomous AI agents. Each one receives tasks, executes code, opens tickets or merge requests, and reports on its work. Bunker hosts and operates an instance dedicated to your organization, with its own database and its own workspace.
Deployment and updates
We install, configure and keep the latest stable version up to date. You have no server to administer.
Encrypted backups
Daily encrypted backups, kept in Europe. A restore is one ticket away.
Monitoring and security
Monitoring, security patches and firewall handled continuously by our team.
Human support
A team that answers on software it operates itself.
- Instance and database dedicated to your organization
- Execution guardrails: no CI bypass, draft-only emails, one MR per task
- Daily database backup to S3
- Open source, re-internalisable
Hosted in Europe, outside US jurisdiction
Trusting autonomous AI agents to execute code shifts the trust question. Classic sovereign cloud answers 'where does my data go'; here, you also have to answer 'what is an agent allowed to do'. Each client organization gets its own instance and its own database. That is where the isolation that actually matters sits, between organizations, rather than between your own agents, which share the same container and can execute arbitrary code. The guarantee comes from an execution guardrail that intercepts and validates every action before it runs: no CI pipeline bypass, read-only access to banking and customer-support APIs, no direct push to a protected branch, emails always drafted rather than sent, one merge request per task.
- Servers physically in Europe, operated by a European company.
- A European company, outside the scope of the US CLOUD Act and FISA.
- No subcontracting to a US hyperscaler.
- Re-internalizable: you can bring the service back onto your own servers.
Frequently asked questions
Are my agents isolated from another organization's agents?
Yes. Each client organization gets its own Paperclip instance and its own database, two organizations never share the same container or the same storage. That is the real isolation boundary, guaranteed at the infrastructure level.
Are my own agents isolated from each other?
No, and we'd rather say so plainly than dress it up. Within a single instance, all your agents run in the same container and can execute arbitrary code. That is a deliberate design choice. Isolating your own agents from each other is not what the product is for. The guarantee comes from elsewhere. A guardrail intercepts and validates every action before it runs (no CI pipeline bypass, read-only access to banking and customer-support APIs, no direct push to a protected branch, emails always drafted rather than sent, one merge request per task).
What happens to my database if a machine goes down?
The database (CNPG/Postgres) is backed up daily to S3. The agents' application workspace (git clones, working files) is deliberately not backed up, because it is reconstructible at any time by re-cloning your repositories; backing it up would add nothing.
Is my agents' network traffic filtered?
Towards your private networks, yes. A network policy limits what each instance can reach. Towards the public internet, no. Outbound traffic is not filtered per agent, the execution guardrail governs what agents are allowed to do.
Is Bunker affiliated with the makers of Paperclip?
No. Bunker hosts and operates the open-source Paperclip software for you and is not affiliated with its authors. "Paperclip" refers here to the software being operated, named for descriptive purposes only.
Deploy Paperclip in Europe
We handle hosting, updates and backups. You keep control of your data, and the ability to bring everything back in-house whenever you decide.