Utilities — electricity, gas, water — sit at the intersection of three pressures: the customer experience expectations of digital natives, ageing physical assets stressed by climate and load, and a regulatory environment that has tightened sharply on cybersecurity. AI is the obvious productivity unlock and the obvious risk surface at the same time.
Customer-facing AI use cases are the most visible (chatbots, billing self-service) but the bigger value is in operations: field crew copilots, asset health monitoring, outage response, regulatory filings. NIS2 has brought operational technology into scope of cyber incident reporting in the EU. NERC CIP has long imposed equivalent obligations on US bulk power. REMIT regulates trading in EU energy markets. AI tooling has to fit inside all of them.
Kosmoy is the operating layer between the utility's apps and the AI they call. Single-tenant Kubernetes deployment fits the typical utility hosting posture (private cloud, often on the same infrastructure as OMS/AMI/SCADA-adjacent systems). Every AI call is logged, attributed and contained.