AI FinOps

Every dollar, attached to the decision that spent it.

The invoice tells you that a call cost four dollars and twelve cents. It cannot tell you whose budget it came out of, whether the prompt carried a patient record, or whether the policy said that model was allowed to see it. Raidu meters the call and decides the call at the same instant, and signs the result.

Book a walkthrough → See the runtime
Runs in your cloud · Zero egress · No percentage of spend
One team · Septemberillustrative
Reached a provider $42,320
Allowed, clean $28,140
Allowed, PII redacted $14,180
Never billed $7,840
Blocked at the budget $4,640
Held for approval $3,200
Verified savings, measured after the change $12,480
◆ every row signed · hash chained · WORM
EU AI ACT · ENFORCES 2026-08-02 HIPAA AI RULE · MAY 2026 COLORADO SB 24-205 · JUNE 2026 NYDFS CIRCULAR LETTER NO. 7 SR 11-7 MODEL RISK MANAGEMENT GDPR · DPDPA · PIPL · LGPD · POPIA ISO/IEC 42001 AIMS NIST AI RMF 1.0 OMB M-24-10 EU AI ACT · ENFORCES 2026-08-02 HIPAA AI RULE · MAY 2026 COLORADO SB 24-205 · JUNE 2026 NYDFS CIRCULAR LETTER NO. 7 SR 11-7 MODEL RISK MANAGEMENT GDPR · DPDPA · PIPL · LGPD · POPIA ISO/IEC 42001 AIMS NIST AI RMF 1.0 OMB M-24-10
The gap

AI spend outran the tools built to watch it.

Cloud cost tooling assumes capacity you provision in advance. AI spend is consumption a model, or an agent, decides at runtime. Tokens have no reserved-instance ceiling, a retry storm looks like ordinary traffic, and a planning loop spends until something stops it.

98%
of FinOps teams now manage AI spend, from 31% two years ago
73%
of companies exceeded their original AI cost plan
2.4×
average budget overshoot on an individual agentic project
$5.95T
forecast worldwide AI spending by 2030
Gartner, Forecast: AI Spending, Worldwide, 2025 to 2030 (2Q26)
Two positions

Reading the bill, or standing on the wire.

Every product in this category is one of two things, and the difference is not a feature list. It is where the software sits relative to the call.

Invoice-side

Connects to your provider's billing API.

Reconciles usage after the provider has issued it, allocates it to an owner, and ranks what looks wasteful. Broad estate coverage, including seats and infrastructure that never touch a gateway. The ceiling is structural: billing metadata carries no prompt, no policy and no decision, so the record can price a call but cannot describe it.

reads bills post-invoice reports no content no enforcement
Request-path · where Raidu sits

Stands between the call and the provider.

The cost is computed at the moment of the call, from the same event that carries the identity, the policy, the redactions and the verdict. Spend can be refused before it happens. And because the cost row and the governance row are one row, a question about money and a question about compliance are the same query.

meters at the call pre-inference enforces policy context signed evidence
The call path

Five steps, before the provider is reached.

Every governed call runs the same sequence, in the same order, inside your own cloud. Nothing in it leaves your environment.

01

Intercept

Your application points at Raidu instead of the provider. No rewrite, no SDK swap, no change to how the prompt is built. The endpoint changes and nothing bypasses it.

POST /v1/messages → raidu.internal · org=acme team=claims agent=intake-7
02

Resolve

Identity, team, project, agent, client application and remaining budget are resolved for this specific call. Budget enforcement runs here, before the provider is contacted, so an overrun is refused at zero cost rather than reported next month.

budget[claims/Q3] · $4,120.00 of $5,000.00 used · assertCredit → PASS
03

Inspect

The prompt is evaluated against your policy. Sixty-plus entity types detected at 99.2% accuracy, data-residency rules applied, permitted models checked for this data class, prompt-injection screened.

entities: US_SSN, MRN, EMAIL · residency: eu-west · model allowlist: PASS
04

Decide and meter

The call is allowed, redacted, escalated for human review, or blocked. Token cost is computed at that same instant, from that same event, and written with the verdict attached.

verdict=ALLOWED_REDACTED · in 1,204 out 388 · $0.0132 · redactions=3
05

Prove

One record carries the cost and the governance decision together, signed with RSA-4096, appended to a SHA-256 hash chain, timestamped under RFC 3161, written to WORM storage with ten-year retention.

sig=RSA-4096 · chain=sha256:9f2c…41ab · tsa=RFC3161 · worm=sealed
In the product

The whole FinOps loop.

Discover, attribute, optimise and control is the industry loop, and Raidu runs all four. It adds the two a read-only tool cannot reach: enforce, at the moment of the call, and prove, in a record that survives an audit.

Attribution
  • Per user, model, provider and agent on every row
  • Team, project and client application as first-class dimensions
  • Custom customer references attached at call time
  • Shared and unallocated cost surfaced rather than silently spread
Budgets
  • Hard budget enforcement in the request path, per user, team, project and tenant
  • Pre-breach alerts at the thresholds you set, ahead of any hard stop
  • Budget burn-down against the period, with the run rate beside it
  • Approval gates for the calls you want a human to see first
Intelligence
  • Forecast, run rate and month-end projection per dimension
  • Anomaly and spend-spike detection with the cause attached
  • Prompt-caching statistics and the saving they produced
  • Model-substitution analysis ranked by expected value and quality risk
Chargeback and proof
  • Chargeback and showback statements per team, project and cost centre
  • Cost per customer and cost per outcome, with retry waste reported apart
  • WORM-anchored attestations that a budget control was enforced
  • Cost and governance in one joint view, queried together
Coverage
  • Multi-provider reconciliation against the vendor's own invoice
  • Model routing and substitution by policy, without touching application code
  • SaaS-seat and cloud-infrastructure cost alongside governed API spend
  • Verified-after-implement savings, measured against the original baseline
One query

The sentence a cost tool cannot produce.

Of forty-two thousand dollars that reached a provider this month, fourteen thousand carried personal data that was redacted before the model saw it. A further seven thousand eight hundred never reached a provider at all: four thousand six hundred refused at the budget, three thousand two hundred held for a human to approve.

Every clause in that sentence comes from one table. A FinOps platform can answer the first number. It has no column for the rest, because the prompt never reached it.

Finance and compliance stop reconciling two systems and start reading the same row.

One table · cost and governance
SELECT
sum(cost_usd) AS spend,
verdict, redaction_count,
policy_version, team
FROM governed_calls
WHERE period = '2026-09'
GROUP BY verdict, policy_version, team;
ALLOWED$28,140
ALLOWED_REDACTED$14,180
ESCALATED$3,200
BLOCKED_BUDGET$4,640
◆ each row independently verifiable · illustrative
Coverage

Everything that crosses the path, metered and governed.

One integration surface for both jobs. The same interception that redacts a prompt is the one that prices it, so coverage for governance and coverage for cost are never two different numbers.

175
Models
24
Model providers
34
Connectors
379
Tools governed
60+
PII entity types

See the full list on the integrations page.

Category comparison

Where each kind of tool reaches its limit.

Compared by architecture rather than by vendor, because within each architecture the answers are the same. For named comparisons, see the comparison library.

Capability Invoice-side FinOps AI gateway Raidu
Meters the call as it happens No Yes Yes
Stops spend before the provider is reached No Yes Yes
Knows whether the call was policy-compliant No Partial Yes
Signed, hash-chained, timestamped cost evidence No No Yes
Runs inside your cloud with zero egress No Partial Yes

Assessed from public product documentation, September 2026.

Commercials

We do not take a cut of the number we exist to lower.

Much of this category prices as a percentage of the AI spend it manages, which means the vendor's revenue grows with the problem the customer bought it to shrink. Raidu is a platform licence. Bring your own provider keys, keep your own contracts, pay nothing on the tokens.

What that means
No percentage of spend
No token markup
No seat tax on auditors
Your provider contracts stay yours
See pricing →
Questions

Answered straight.

How is this different from a FinOps platform that reads my provider bills? +
Position. An invoice-side platform connects to your provider's billing API and reconciles what already happened. It is a reporting system, and a good one. Raidu sits in the request path, so the meter runs at the moment of the call and the budget is checked before the provider is reached. An invoice-side tool can tell you a team overran its budget last month. Raidu refuses the call that would have overrun it, at zero cost, and writes a signed record saying so.
Do I have to choose between the two? +
No, and many enterprises run both. Invoice-side platforms see spend that never crosses a governed path, such as a Copilot seat licence bought on a department card. Raidu sees every governed call in full detail, including the governance context that billing metadata cannot carry. Raidu exports its ledger, so an invoice-side platform can consume it as a source.
Can Raidu stop a call before the money is spent? +
Yes. Budget enforcement runs inside the request path on every llm, chat, message and governed-agent call, before the provider is contacted. A call that would breach its budget is refused, and the refusal is itself a signed record showing which budget applied and how much remained.
What attribution dimensions are available? +
User, model, provider, agent, team, project and client application, on every row. Custom dimensions such as a customer reference can be attached at call time and carried through to chargeback statements and unit economics.
How do you calculate cost per outcome? +
Governed calls carry the workflow and customer reference that produced them, so spend rolls up against a unit of business work rather than a unit of compute. Cost per resolved case, per merged pull request, per closed opportunity, per document reviewed. The retry waste is reported separately, because a successful outcome that took four attempts costs four attempts.
What makes the cost record admissible rather than merely accurate? +
Each record is signed with an RSA-4096 key, appended to a SHA-256 hash chain, timestamped under RFC 3161, and written to WORM storage with ten-year retention. A third party can verify that a record has not been altered without trusting Raidu and without trusting the customer who runs it. A dashboard export cannot make that claim, because it is regenerated on request from a mutable store.
Does Raidu charge a percentage of our AI spend? +
No. Raidu is a platform licence. Pricing does not rise because your AI spend rises, which means the commercial relationship does not depend on the number the product exists to bring down.
Where does the cost data live? +
Inside your own cloud. Raidu installs into your GCP, Azure or AWS environment, and every rollup, forecast, statement and attestation is computed there against your own data. No usage metadata, spend data or prompt content is sent to Raidu.