RIFFL by Itasca

Your people build, run and govern their own AI-assisted business apps, and IT keeps control.

Talk to us Available through Google Cloud Marketplace private offers

The problem

Two needs, one platform

Your teams

Your teams want AI-built tools now, shaped around the way they already work.

Your IT department

IT cannot let unmanaged apps, credentials and spending spread across the organisation.

RIFFL answers both: your people build what they need, on a platform IT can see and govern.

How it works

From a description to a governed app

1
Describe it
Describe what you need to an AI coding agent.
2
The platform builds it
RIFFL builds, hosts and secures the app for you.
3
Share and measure
Share it with the right people and see how it is used.

Nobody on your side needs a cloud account, a deploy pipeline or infrastructure skills.

Features

What RIFFL gives you

Build with your coding agent

Apps are built and changed through an AI coding agent connected over MCP. Every version is kept and can be restored.

Private by default

An app opens only for its owner, the people it is shared with, the organisation's owners and invited guests.

Single sign-on

Sign-in is through Google or Microsoft, with no platform passwords. Your organisation can require single sign-on.

Each organisation kept apart

Each organisation has its own service account, its own database and short-lived credentials, and each app has its own web address.

AI built in, metered and budgeted

Gemini and Claude models through Google Cloud’s Gemini Enterprise Agent Platform (formerly Vertex AI), with the cost of each call recorded, monthly budgets per app, and no prompt text stored.

Connect business systems

Connect Google, Microsoft and HubSpot, and set keys once for your organisation and assign them to apps. Secrets are kept in Google Secret Manager.

Your apps in your AI assistant

One MCP connector per organisation offers each person every app they are allowed to use, in Gemini Enterprise, Claude or ChatGPT.

Files, schedules and data

File uploads, scheduled jobs, and a PostgreSQL database per organisation, with a backup taken before every schema change.

Help inside every app

A “Need help?” button in each app, help through your AI assistant, and ideas sent to the app's owner.

Insights

Usage and adoption by app and by person, including use through AI assistants, how your organisation uses Gemini Enterprise itself, and learning progress by department.

One outbound IP address

All traffic from the platform and its apps leaves from a single published address, so your partners can allowlist it.

Careful releases

Every change is tested on a separate copy and confirmed by a person before it reaches you, and the previous version is kept ready.

RIFFL and Gemini Enterprise

Your apps inside the assistant, and the assistant's use measured

RIFFL works with Gemini Enterprise in two directions. Your apps are offered to the assistant through your organisation's connector, and the assistant's own use is brought back into RIFFL, so you can see both side by side.

Your organisation's apps in the assistant

One MCP connector for Gemini Enterprise, which also works with Claude and ChatGPT.

One connector per organisation offers every app a person is allowed to open. Nobody sees an app they could not open in a browser, and guests invited to a single app are not offered it through the connector.
Tools that only read data start switched on. Tools that change data start switched off for everyone except the app's owner, and each person chooses which to allow.
Each person can hide any app from their own connector without affecting anyone else.
Access and switches are checked on every call, not only when the list is drawn, so a change applies at once even if the assistant keeps an earlier copy of the list.
Every call passes the same access checks as opening the app, and is counted in Insights, which shows whether each app was reached in a browser, through an assistant (and which one), or from another app.

How your organisation uses Gemini Enterprise

Each day RIFFL shows how many people used the assistant, how many answers, searches and file uploads they had, and which models and agents answered, beside the use of your apps through the connector. Figures run to the end of the previous day and are shown to your organisation's owners.

Connecting it

1In the Gemini Enterprise admin console, turn on user activity logging. Include user identities if you want figures for each person.
2Grant RIFFL's dedicated read-only identity access to the logs of the Google Cloud project where Gemini Enterprise runs. The RIFFL console shows the exact command.
3Enter that project's ID in RIFFL.

RIFFL reads Gemini Enterprise's activity log once a day and keeps only daily counts. It never keeps the text of a question, an answer or a file. The read-only identity has access to logs in that one project and nothing else, and your organisation can withdraw it at any time.

Adoption

Help your people use AI well, and see that they do

Building apps is half of adopting AI. RIFFL also holds the learning, rollout plan and practice that come with working with Itasca Innovation, so your people learn in the same place they build, and your organisation's owners can see how far each department has gone.

Learning

Learning paths, workshops, videos and resources, chosen by Itasca for your organisation from its own catalogue. Some may be written for you alone.

Paths for a role or audience: an ordered set of videos, workshops and resources, with each person's progress and next step.
Workshops led by Itasca, showing whether each has been delivered for you, the next session and what people leave with.
Short videos played in the console, which keep your place so you can continue watching.
Playbooks, plans and practice kits to download or open.

Rollout

Your rollout plan as agreed with Itasca, in the same console as your apps.

Each phase, and how far along the current one is.
A checklist for each phase, which your organisation's owners tick.
The messages each audience will receive and when, which your owners can add to or change.
How earlier groups got on.

Practice

AI champions in each department, and exercises to practise on.

Your owners name champions, listed by department.
Each champion logs the sessions they led and the people they helped, and anyone who has been quiet is flagged.
Practice kits built on sample data, which your owners can schedule as a session.

Measuring adoption

Figures your organisation's owners can act on.

Departments typed for each person or imported from a CSV file. Only existing members are updated, and a department never changes what anyone may open.
Paths assigned to departments, with how many people started and finished each item.
The share of your Gemini Enterprise seats used in the last seven days.
Each app's stage (sandbox or graduated), the most sensitive kind of data it handles, and the hours a month it gives back, totalled as time given back.

Your Itasca team, in the console. The people working with your organisation are named in every “Need help?” panel, and their current recommendations appear on your start page.

What is recorded. Watching a video, opening a resource or attending a workshop is recorded against the person's name. Only that person, your organisation's owners and Itasca can see it. An app's stage and data class are labels for now and do not limit what the app can reach.

In development

Being built now, and not yet available. Ask us about timing.

Departments read from your Google Workspace or Microsoft directory each day, with your administrator's consent. Departments set by hand are kept, and nobody is ever added as a member.
An app registry showing each app's stage, data class, weekly users and value, with the history of decisions about it.
Help requests with a topic, and a way to mark one as blocking your work.
Assistant use by department, with the trend over weeks.
Your AI maturity assessment results in the console, and a view for executives.
A scorecard of progress against a baseline you agree with Itasca.
AI budgets by department.
Data boundaries: an app's data class deciding which of your systems it may connect to.

Built on Google Cloud

Runs entirely on Google Cloud

RIFFL runs entirely on Google Cloud, in the United States (us-central1). Itasca Innovation operates no servers of its own, and nothing is installed in your own cloud: you use RIFFL as a service.

Apps

The platform and every app run on Google Cloud Run, each app as its own private service.

Data

Platform records are kept in Firestore, and each organisation's app data in its own Cloud SQL for PostgreSQL database.

AI

Gemini and Claude models are reached through Google Cloud’s Gemini Enterprise Agent Platform (formerly Vertex AI).

Builds, secrets and schedules

Apps are built with Cloud Build, secrets are held in Secret Manager, and scheduled jobs run through Cloud Scheduler.

Requests to some AI models may be served through Google's global endpoint rather than from us-central1.

Security and trust

Built for your IT and security teams

Read the security page

Security questionnaire answers are available on request from support@itascainnovation.ai.

Sign-in is through Google or Microsoft with verified addresses only. Access is checked on every request, and removing a person takes effect immediately.
Each organisation's apps run under their own service account, with their own database reached by short-lived credentials. Apps hold no database password.
All connections use HTTPS and all stored data is encrypted by Google Cloud. Secrets and connection tokens are kept in Google Secret Manager and are never shown back to anyone.
Every platform change is tested on a separate copy and confirmed by a person, and a backup is taken before any app database is changed.

Support

Help from people who run the platform

Support is staffed Monday to Friday, 9:00 to 17:00 US Central Time, except US public holidays. You can ask for help from inside any app, through your AI assistant, from the RIFFL console or by email at support@itascainnovation.ai.

Read the full support policy

First-response targets by severity, during support hours
Severity	First response
Critical	4 business hours
Serious	1 business day
Normal	2 business days

Targets apply during support hours. A signed agreement with your organisation may set different terms.

Who it is for

Business teams, with IT approving

RIFFL is for operations, finance, HR and sales teams at mid-market and enterprise organisations who want to build the tools they need, with their IT department approving and keeping oversight.

Buying

How to buy RIFFL

Sold directly and through Google Cloud Marketplace private offers, so you can buy against your Google Cloud commitment.

Talk to us about RIFFL

Resources