DSH Enterprise

English

简体中文

English

简体中文

Appearance

DSH EnterpriseThe employee AI workstation,
under enterprise governance

Employees adopt it without friction; the enterprise gains unified governance of accounts, models, costs, DLP, plugins, and audit trails — all through a self-hosted gateway.

Live Demo
Deployment Guide

Workflows stay unchanged

The client remains DSH Desktop; only authentication switches to an enterprise account. Model access and plugin installation work as usual, bounded by the enterprise allowlist, with a traceability watermark enabled by default. No new workflow to learn.

Usage is fully visible

Every model call is recorded per user and request (time, model, token volume). With enterprise pricing configured, daily costs are computed automatically and exportable to CSV for accounting and reconciliation.

Keys centrally held

API keys are stored exclusively on the gateway and never distributed to endpoints. Deactivating an account immediately revokes all of its device sessions.

Outbound data masking

Content matching rules — ID numbers, bank card numbers, API keys — is masked or blocked before transmission. An observe mode logs matches first; enforcement follows once rules are validated.

Governed plugin distribution

Plugins are distributed exclusively through the enterprise plugin registry; off-list installations are handled per policy and every attempt is recorded. The governance component itself cannot be removed.

Tamper-evident audit trail

Requests and logins are recorded in full and sealed daily via hash chains; any alteration is detectable the same day. Default retention is 90 days and configurable.

Architecture

Every request passes through the enterprise gateway

Employee desktop

DSH Desktop with the enterprise plugin, connected via an enterprise account.

Enterprise gateway · your server

Authentication, model list, masking, and audit trail are enforced here.

Enterprise accountsModel listMaskingAllowlistAudit trailBilling

AI providers

Any OpenAI-compatible provider; keys and billing managed by the enterprise.

Admin console (browser)

Policy configuration, usage statistics, billing, and audit trail queries.

All request logs are persisted on your own servers, with a configurable retention period.

Comparison

Self-hosted gateway vs. hosted agent platforms

DSH EnterpriseHosted agent platforms (WorkBuddy Enterprise as example)
DeploymentYour own server; intranet deployment supportedThe vendor's cloud; private deployment from 300 seats
Chat dataAll traffic via your own gateway; data stays on your serversRouted through the vendor's platform; private edition keeps data in-domain
Client changeNone; only the authentication method changesEmployees move to the vendor's workbench
Model sourcingAny OpenAI-compatible provider; keys self-managedPlatform-integrated models, with enterprise model configuration
Entry costFree up to 30 people; commercial license beyondFrom ¥198/person/month (Flagship, 1-seat minimum)
SourceAvailable; independently auditableClosed source

WorkBuddy figures are cited from Tencent Cloud's official product page; the official page prevails.

Every DSH, under enterprise management

One server, one command, five minutes to deploy.

Read the deployment guideLive Demo
npm i -g dsh-enterprise-gateway
Free for individuals and organizations of up to 30 people (DSH Enterprise Community License); larger organizations need a commercial license: mafeis@gmail.com
Questions and suggestions: GitHub Issues

© 2026 DSH Enterprise