--- title: "Calico for AI Workloads" source: "https://www.tigera.io/tigera-products/ai-workloads/" description: "Secure AI data, models, and pipelines in Kubernetes with Calico. Get enterprise-grade networking, microsegmentation, and observability to prevent data exfiltration." --- Solution # Calico for AI Workloads Secure AI data, models, and pipelines running in Kubernetes with enterprise-grade networking, network security, and observability. [Start Free](https://www.calicocloud.io/) [Get a Demo](https://www.tigera.io/demo/) ![Calico AI workload stages shown on a laptop screen.](https://www.tigera.io/app/uploads/2026/01/Hero-Calico-AI-workloads-02.png) ## Benefits Prevent AI data exfiltration, streamline your multi-cluster network policies, and gain AI-specific observability ![Database icon with a padlock.](https://www.tigera.io/app/uploads/2025/09/icon-data-in-transit-encryption.svg) ### Prevent AI data exfiltration Block unauthorized egress and protect AI model weights, embeddings, and datasets from misuse ![Five interconnected circles representing a network.](https://www.tigera.io/app/uploads/2023/07/icon-microsegmentation.svg) ### Streamline multi-cluster network policies Apply uniform security controls across AI dev, training, and inference clusters ![Magnifying glass icon with an exclamation mark.](https://www.tigera.io/app/uploads/2023/04/icon-Intrusion-detection-prevention.svg) ### Improve security posture Track traffic flow and DNS activity across pipelines to investigate anomalies and demonstrate compliance ## Trusted by Customers Worldwide [![Orange logo](https://www.tigera.io/app/uploads/2022/03/logo-Orange.png)](http://www.orange.com/en) [![Essentra logo](https://www.tigera.io/app/uploads/2022/04/logo-Essentra.png)](https://www.essentra.com/en) [![Siemens Healthineers logo](https://www.tigera.io/app/uploads/2022/09/logo-siemens-healthineers.png)](https://www.siemens-healthineers.com/) [![RBC logo](https://www.tigera.io/app/uploads/2024/05/logo-RBC.png)](https://www.rbcroyalbank.com/) [![Marsh McLennan logo](https://www.tigera.io/app/uploads/2022/03/logo-Marsh-and-McLennan.png)](http://www.mmc.com/) [![Presidio logo](https://www.tigera.io/app/uploads/2024/05/logo-Presidio.png)](https://www.presidio.com/) [![Box logo](https://www.tigera.io/app/uploads/2022/03/logo-box.png)](http://www.box.com/home) [![Nvidia logo](https://www.tigera.io/app/uploads/2024/05/logo-Nvidia.png)](https://www.nvidia.com/) [![FM Global logo](https://www.tigera.io/app/uploads/2023/03/logo-FM-Global.png)](https://www.fmglobal.com/) [![Upwork logo](https://www.tigera.io/app/uploads/2022/12/logo-upwork.png)](https://www.upwork.com/) [![GoDaddy logo](https://www.tigera.io/app/uploads/2023/03/logo-GoDaddy.png)](https://www.godaddy.com/) [![Arvato Systems logo](https://www.tigera.io/app/uploads/2025/01/logo-Arvato-systems.png)](https://www.arvato-systems.com/) [![Aldagi logo](https://www.tigera.io/app/uploads/2022/10/logo-aldagi.png)](https://aldagi.ge/en/) [![NBC Universal logo](https://www.tigera.io/app/uploads/2022/09/logo-NBC-Universal.png)](https://www.nbcuniversal.com/) [![Chipotle logo](https://www.tigera.io/app/uploads/2024/05/logo-Chipotle.png)](https://www.chipotle.com/) [![Meridianlink logo](https://www.tigera.io/app/uploads/2022/03/logo-Meridianlink.png)](http://www.meridianlink.com/) [![Mulligan Funding logo](https://www.tigera.io/app/uploads/2022/03/logo-MulliganFunding.png)](https://www.mulliganfunding.com/) [![HanseMerkur logo](https://www.tigera.io/app/uploads/2022/03/logo-HanseMerkur.png)](http://www.hmrv.de/en) [![Fiserv logo](https://www.tigera.io/app/uploads/2022/12/logo-fiserv.png)](https://www.fiserv.com/) [![Berenberg logo](https://www.tigera.io/app/uploads/2022/03/logo-BERENBERG.png)](http://www.berenberg.de/en/) [![eHealth logo](https://www.tigera.io/app/uploads/2023/10/logo-eHealth.png)](https://www.tigera.io/ehealth-case-study/) [![Coinmetrics logo](https://www.tigera.io/app/uploads/2022/03/logo-coinmetrics.png)](http://coinmetrics.io/) ![Network security screenshot](https://www.tigera.io/app/uploads/2024/05/Network-security-CN-1920x1029-1.png) ### Microsegmentation for AI & Traditional Apps Isolate workloads and stop lateral movement with namespace, label, and tiered policy controls, so AI services and business apps can safely coexist. [Learn More](https://www.tigera.io/features/microsegmentation/) ### AI-Specific Observability & Compliance Flow logs, DNS logs, and audit trails reveal AI application and pipeline behaviors and support HIPAA, PCI DSS, and GDPR compliance. ![The diagram illustrates Calico managing network policies across four connected Kubernetes clusters.](https://www.tigera.io/app/uploads/2025/09/Multi-Cluster-Network-Policy-Enforcement-1.png) ### Multi-Cluster Network Policy Enforcement Calico Cluster Mesh enforces consistent security across distributed Kubernetes clusters, improving availability and simplifying networking operations for AI pipelines. [Learn More](https://www.tigera.io/tigera-products/cluster-mesh/) ![Kubernetes cluster diagram illustrating multi-tenant isolation using namespaces.](https://www.tigera.io/app/uploads/2025/09/Secure-Multi-Tenant-AI-Environments-diagram.png) ### Secure Multi-Tenant AI Environments Calico secures AI workloads in shared Kubernetes clusters by isolating tenants with namespaces, consistent network policy enforcement, and tightly controlled ingress/egress. [Learn More](https://www.tigera.io/blog/securely-deploying-running-multiple-tenants-on-kubernetes/) ![AI workload egress flow showing anonymized source, centralized monitoring, and verification.](https://www.tigera.io/app/uploads/2025/09/Advanced-Egress-Control-for-AI-Workloads-1.png) ### Advanced Egress Control for AI Workloads Use DNS policies and centralized egress gateways to only allow access to approved APIs and endpoints (e.g., api.openai.com, huggingface.co) and prevent data leaks. [Learn More](https://www.tigera.io/blog/prevent-data-exfiltration-in-kubernetes-the-critical-role-of-egress-access-controls/) ![Calico Ingress Gateway and WAF protect services from an external load balancer.](https://www.tigera.io/app/uploads/2025/09/Ingress-with-Built-In-WAF.png) ### Ingress with Built-In WAF Calico Ingress Gateway protects AI services by controlling inbound traffic and blocking malicious requests with integrated Web Application Firewall protection. [Learn More](https://www.tigera.io/tigera-products/ingress-gateway/) ## Available on Microsoft Azure, AWS, and Google Marketplace Get started right away on Azure, AWS, or Google Cloud—every Calico component you need to get up and running is ready to go. [On Azure](https://azuremarketplace.microsoft.com/en-ca/marketplace/apps/tigerainc1620235671643.calicocloudsaas?tab=overview) [On AWS](https://aws.amazon.com/marketplace/pp/prodview-pq3tgvtlj3wce) [On Google Cloud](https://console.cloud.google.com/marketplace/product/tigera-public/calico-cloud?inv=1&invt=Ab27_g&project=tigera-public) ![Microsoft Azure, AWS, and Google Cloud logos.](https://www.tigera.io/app/uploads/2025/07/Solution-cloud-marketplace-AWS-Azure-03.svg) ## Customer Testimonial Here’s what our customers are saying about us ![Quotation marks](https://www.tigera.io/app/themes/tigera2021/dist/img/quotes-sign.svg) Calico’s performance is impressive. It met the strict latency demands of our AI platform, ensuring no degradation in transaction processing speeds. Tigera’s support in tuning our environment was invaluable. Senior Director of Security Architecture, A Leading Global Payment Services Corporation [Learn More](https://www.tigera.io/anonymous-digital-payments-case-study/) Calico’s monitoring capabilities really set it apart from other solutions. Via the Dynamic Service and Threat Graph, we can see what requests are flowing between each service’s namespace, allowing us the granular visibility we need for troubleshooting. Andris Jersovs ASL, Senior DevOps Engineer, Arvato Systems ![Arvato Systems logo.](https://www.tigera.io/app/uploads/2025/09/logo-Arvato-Systems-170x60-02.png) [Learn More](https://www.tigera.io/arvato-systems-case-study/) [Read Customer Stories](https://www.tigera.io/customer-stories/) ## Featured Resources Developer-created resources to help you secure your Kubernetes deployment ![Calico: Securing AI Workloads in Kubernetes](https://www.tigera.io/app/uploads/2025/09/Featured-resources-AI-Workloads-in-Kubernetes-380x200.png) Datasheet ### Calico: Securing AI Workloads in Kubernetes Learn how Calico secures AI workloads in Kubernetes with microsegmentation, egress control, and observability. [Read More](https://info.tigera.io/rs/805-GFH-732/images/datasheet-Securing-AI-Workloads-in-Kubernetes.pdf) ![Securing AI Workloads in Kubernetes: Why Traditional Network Security Isn’t Enough](https://www.tigera.io/app/uploads/2025/09/Securing-AI-Workloads-in-Kubernetes-1-380x200.png) Blog ### Securing AI Workloads in Kubernetes: Why Traditional Network Security Isn’t Enough Explore why AI workloads demand stronger Kubernetes security and how Calico can help. [Read More](https://www.tigera.io/blog/securing-ai-workloads-in-kubernetes-why-traditional-network-security-isnt-enough/) ![The Crucial Network Security Guardrails for Ensuring GenAI Success](https://www.tigera.io/app/uploads/2024/11/The-Crucial-Network-Security-Guardrails-for-Ensuring-GenAI-Success-380x200.png) Blog ### The Crucial Network Security Guardrails for Ensuring GenAI Success Ensure safe, reliable GenAI deployments by defining essential network-security guardrails. [Read More](https://www.tigera.io/blog/the-crucial-network-security-guardrails-for-ensuring-genai-success/) [All Resources](https://www.tigera.io/resources/) ![Calico Logo](https://www.tigera.io/app/uploads/2026/01/Calico-logo-2026-black-text.svg) ## Ready to Get Started? Get started for free or request a demo to see Calico in action