White paperGoverning AI agents in production: policies, human approvals and an emergency stop.Read the white paper

Article · Governance

FinOps for LLM usage: estimated, measured, billed

Navin Enterprise AI tracks the cost of every model call in three stages: estimated before the call, measured afterwards from the Usage Event, then reconciled with the provider invoice. Token accounting, a pricing registry and quotas keep the cycle under control.

Published on 2 min read

The cost of a model depends on tokens, seconds of audio and GPU time, and it comes from several providers with different price lists. Navin Enterprise AI treats cost as governance data, held by the single Control Plane next to policies and quotas.

Three stages for every call

  • Estimated: price list times expected units, before the call (POST /v1/gateway/estimate, POST /v1/finops/estimate).
  • Measured: the Usage Event after the call, with tokens, seconds and GPU time (POST /v1/finops/usage).
  • Billed: import of the provider invoice or export, then reconciliation (POST /v1/finops/reconciliation/run, GET /v1/finops/reconciliation/report).

Token accounting and the pricing registry

Token accounting (brick B09) counts the units of every call that crosses the Model Gateway and produces a Usage Event. The model pricing registry (brick B10) holds the price lists, and the pricing engine (brick H03) turns units into costs. Costs are recorded in a cost ledger (brick H02) backed by PostgreSQL, with ClickHouse for analytics.

Quotas before, not after

Before the call, the estimate reserves quota; after the call, the measured cost settles it. Reservations that are never confirmed expire through the server worker. The router only picks among the provider, model and region triples that policy allows, and failover stays within those lists.

Reconciliation

Cost reconciliation (brick B11) compares measured costs with what providers actually bill, from an invoice import or a provider export, and produces a report. Real-time voice sessions are metered per second and per token, and local GPU time is accounted with the DCGM exporter: self-hosted inference has a cost too.

  • White paperGovernance

    Governing AI agents in production

    How Navin Enterprise AI keeps autonomous agents under control: OPA policies stacked from platform to tenant to project, approvals with a human in the loop, a kill switch available at any time and a governance registry as the single source of truth.

    25 min read
  • DatasheetAgents

    Isolated MCP runtimes per user and project

    The MCP registry and gateway decide who may use which server; the MCP runtime creates isolated instances on demand on the ToolHive Kubernetes Operator and destroys them after use. Every tool call still goes through policy, DLP and approval.

    2 min read
  • DatasheetSecurity

    Mandatory file scanning with ClamAV and YARA-X

    Every file sent to the AI is quarantined, scanned by ClamAV and YARA-X and then validated before Docling, OCR or RAG can read it. Fully local, fail closed, logged and highly available.

    2 min read

See these principles applied to your use cases

An architect presents the platform against your own constraints.