Cloudflare Confidential
About This Demo
Why Cloudflare built it →
Eastman OS · Powered by Cloudflare Workers AI

What are we working on today?

Governed AI workspaces across operations, safety, supply chain, and Eastman's global customer network.

Add resource
Featured Workspaces
🛡️
Security & Resilience Command Center
Perimeter defense, CFATS alignment, OT/IT resilience posture, DLP enforcement across all 6 manufacturing sites
Live App
🗺️
Critical Sites Command
Live OT status — Kingsport TN, Longview TX, Martinsville VA, Ghent S+N Belgium, Dalian China. 24/7, no downtime buffer.
Live App
🏢
Customer Portal Hub
3-tier AI access — Toyota, Estée Lauder, Medtronic, Patagonia — 100+ countries via Cloudflare Zero Trust MCP
Live App
🦺
Safety Performance Dashboard
OSHA PSM tier alerts, PPE compliance via edge vision AI, near-miss tracking — all 6 sites, top-25% global peer benchmark
Live App
📊
Sales Forecasting & Margin Defense
Azure OpenAI Co-Pilot, destocking detection, price-cost spread, 90-day demand horizon via SAP IBP
Live App
🤖
Responsible AI Portfolio Review
Model governance, cost, access controls, human approval requirements, and risk tiers across all Eastman AI deployments
Slide Deck
Illustrative prototype. Uses public Eastman context and simulated data — no connection to Eastman systems. Built by Cloudflare to demonstrate Cloudflare OS.

Workspaces

All active workspaces. Illustrative prototype — simulated data only.

🔐 Security & OT
🛡️
Security & Resilience
5m ago · Security
Live App
🧪
R&D Molecular Design
4h ago · Research
Live App
🏭
Process Optimization (OT)
1h ago · Operations
Live App
🦺
EHS Vision & Safety AI
30m ago · EHS
Live App
👁️
Shadow AI Monitor
Continuous · IT Security
Live App
🛡️ Physical Security
🛰️
Perimeter & Drone Defense
5m ago · CFATS
Live App
🛂
Access Control & Tailgating
20m ago · Security
Live App
🔍
Sabotage & Tamper Monitor
Continuous · Security
Live App
🗺️
Evacuation & Muster
Standby · Emergency
Live App
🏭 Operations & Plant
🗺️
Critical Sites Command
12m ago · Operations
Live App
🦺
Safety Performance
1h ago · EHS
Live App
🔧
Plant Reliability & Assets
30m ago · Maintenance
Live App
♻️
Mass-Balance & ISCC
2h ago · Sustainability
Live App
🌐
Tariff & Trade Tracker
Today · Finance
Live App
Energy & Steam Balance
Live · Kingsport + Longview
Live App
⛓️ Supply Chain
🚆
Hazmat Logistics Tracker
2h ago · Logistics
Live App
📦
Predictive Sourcing
3h ago · Procurement
Live App
🔮
What-If Scenario Model
6h ago · Finance
Live App
📈 Sales & Revenue
📊
Sales Forecasting & Margin
1h ago · Commercial
Live App
💼
B2B Opportunity Pipeline
2h ago · Sales
Live App
🤝 Customer & Partner
🏢
Customer Portal Hub
1h ago · Commercial
Live App
🧬
Formulation Copilot
3h ago · R&D
Live App
🌱
Carbon Receipt Engine
Today · ESG
Live App
🛂
Regulatory Passport
Yesterday · Legal
Document
📈
Customer SLA & OTIF
6h ago · Commercial
Live App
📋 Executive Briefings
🛡️
Security & Resilience Command
5m ago · CISO
Live App
🤖
Responsible AI Portfolio Review
Today · CIO
Slide Deck
💻
Enterprise Technology Brief
Today · CTO
Document
Workspace
ILLUSTRATIVE
Dashboard
Policy trace
Connections
Live App

Context

Organizational knowledge grounding every Eastman OS response.

🏢
Company Profile
Kingsport, TN · Founded 1920 · ~14,000 employees · $9.2B revenue · 36–40 manufacturing sites · NYSE: EMN (S&P 500). Four segments: Advanced Materials, Additives & Functional Products, Fibers, Chemical Intermediates.
NYSE: EMN$9.2B Revenue36+ Sites100+ Countries
🤝
Business Partners
P&G (circular packaging), Arkema (Jarylec dielectric acquisition), Canopy NGO (Canopy Hot Button Report), ISCC (mass-balance cert), SAP (S/4HANA), G4S Security (physical security), Microsoft Azure (cloud + GenAI Sales Co-Pilot).
P&GArkemaCanopy NGOISCCSAP
🚗
Automotive Customers
Toyota & Tesla — Saflex® acoustic PVB for HUD windshields. Fuyao Glass and Saint-Gobain — Tier-1 glass fabricators buying industrial rolls of Saflex® for automotive glass lamination.
ToyotaTeslaFuyao GlassSaint-Gobain
🧴
CPG & Cosmetics
Estée Lauder — Cristal™ Renew for luxury cosmetic jars. Herbal Essences (P&G) — 50% recycled bottles. Neutrogena (J&J) — recyclable packaging. Newell/CamelBak — Tritan™ Renew water bottles. Medtronic — surgical housing.
Estée LauderCamelBakMedtronic
👗
Fashion & Coatings
H&M Group & Zara — Naia™ cellulosic fiber for eco-fashion. Patagonia — technical outdoor sportswear. BASF Coatings, PPG Industries, Sherwin-Williams — Tetrashield™ resins and specialty amines.
H&MPatagoniaBASFPPG
🗺️
6 Critical Manufacturing Sites
Kingsport TN (flagship, PRT recycling), Longview TX (40+ chemicals, $1.3B recycling, SAP 4-hr batch window), Martinsville VA (LLumar®/SunTek®), Ghent South Belgium (Saflex®), Ghent North Belgium (methylamines), Dalian China (Ai-Red™).
Kingsport TNLongview TXGhent BelgiumDalian China

Skills

Purpose-built playbooks for Eastman's operations, compliance, sales, and customer success teams.

🏢
Customer Access Provisioning
Onboard B2B customers with scoped AI permissions, tier assignment, NDA validation across 100+ countries via Salesforce + Cloudflare Access.
🧬
Material Recommendation
Match customer specs to 2,000+ Eastman materials — ranked fit scores, certifications, and competitive displacement context.
🌱
Carbon Certificate Generator
Cloudflare-attested Scope 3 certificates per shipment. CDP-ready, legally defensible, greenwash-proof.
📜
Regulatory Passport
REACH, TSCA, K-REACH, MEE compliance packs per customer — local language, correct regulatory format.
🦺
EHS Incident Report
Root cause analysis with corrective actions and auto-drafted notification for OSHA PSM, EPA RMP, CISA CFATS.
🌐
Tariff Impact Assessment
HS code analysis against new duty schedules — margin impact on Tritan™, Saflex®, Therminol®, methylamine lines.
♻️
Mass-Balance Allocation Audit
Verify ISCC certification alignment — prevent Renew oversell liability and protect PRT program certification.
🤖
Sales Co-Pilot Brief
Synthesize call notes from Salesforce, surface cross-sell opportunities, generate pre-meeting prep via Azure OpenAI.

Integrations

All connections route through Cloudflare AI Gateway via MCP (Model Context Protocol) — unified audit log, DLP enforcement, and model governance before any AI model sees data.

🔗
Connected via MCP — Model Context Protocol
Cloudflare AI Gateway is the universal MCP router — every integration below passes through it, enforcing DLP, scoped permissions, and full audit logging.
MCP v2.4 · Active
📊
SAP S/4HANA
ERP — procurement, inventory, contracts, production orders. Longview TX: 4-hr SAP batch window monitored 24/7.
MCP · via Cloudflare Gateway
Connected
☁️
Microsoft Azure
Azure AD / Entra SSO, Digital Manufacturing Platform, Azure OpenAI Sales Co-Pilot via Microsoft Fabric.
MCP · via Cloudflare Gateway
Connected
☁️
Salesforce CRM
Customer accounts, opportunity pipeline, B2B contract lifecycle. Azure OpenAI Co-Pilot integrated for call synthesis.
MCP · via Cloudflare Gateway
Connected
🔬
LIMS (LabVantage)
Lab results, formulation batch data, R&D test outcomes — IP-classified. SMILES strings DLP-blocked from AI.
MCP · via Cloudflare Gateway
Connected
📧
Microsoft 365
Email, Teams, SharePoint — SSO via Azure AD Entra. DLP enforced on all AI-drafted outbound content.
MCP · via Cloudflare Gateway
Connected
🌐
Customer Portal API
B2B access registry for 100+ countries. Tier-based AI permissions via Cloudflare Access. Zero-trust per account.
MCP · via Cloudflare Gateway
Connected
🏭
OT / DCS (Honeywell)
Distributed control systems at Kingsport and Longview — advisory-only mode. Human approval required for any setpoint.
MCP · Advisory Mode
Advisory Mode
📹
Physical Security (Avigilon)
Thermal CCTV and edge cameras for EHS vision AI, perimeter monitoring, counter-UAS, and muster tracking.
MCP · via Cloudflare Gateway
Connected
⚠️
Enablon (EHS)
EHS incident tracking, OSHA PSM, EPA RMP, and Title V emissions reporting. Authorization in progress.
MCP · pending auth
In progress

AI Gateway

Model routing, cost, DLP, and usage across Eastman's internal teams and customer-facing AI — all via Cloudflare Workers AI Gateway and MCP.

91,440
Total requests (30 days)
↑ 22% vs prior period
$6,830
Total cost (30 days)
↓ 11% via caching + routing
67%
Cache hit rate
↑ 8pts from policy update
43%
Customer-originated requests
↑ 7pts QoQ
Model Usage — 30 Days
Anthropic
Claude 4.6 Sonnet38,420 req
Claude 4.5 Sonnet12,100 req
Claude 4.5 Haiku8,840 req
☁️ Workers AI
DeepSeek V4 Pro11,200 req
DeepSeek V4 Flash6,300 req
Qwen3 Coder 480B4,100 req
Kimi K2.62,800 req
GLM 5.21,940 req
OpenAI
GPT-5.43,200 req
GPT-5.4 mini740 req
GPT-5.5600 req
TimeOriginAccountModelProviderTokensDLPCost
09:52 AMCustomerToyota Motor CorpClaude 4.6 SonnetAnthropic3,210✓ Clear$0.012
09:48 AMCustomerEstée LauderClaude 4.6 SonnetAnthropic5,120✓ Clear$0.018
09:43 AMInternalOT — Longview TXQwen3 480BWorkers AI12,300⚡ Advisory hold$0.002
09:41 AMInternalEHS — KingsportGPT-5.4OpenAI1,840✓ Clear$0.007
09:33 AMInternalR&D — KingsportDeepSeek V4 ProWorkers AI8,440⚠ SMILES blocked$0.000
09:21 AMCustomerMedtronic GlobalClaude 4.5 HaikuAnthropic980✓ Clear$0.001
09:08 AMCustomerAmcor FlexiblesKimi K2.6Workers AI2,450✓ Clear$0.001

Governance

AI controls, data policies, and access rules across Eastman OS and the global customer network.

🛡️
Chemical Formula DLP
Blocks CAS numbers, SMILES strings, or proprietary molecular structures from external models. 11 blocked this week. All logged for CFATS eDiscovery.
🔐
OT Advisory Mode — Human in the Loop
AI connected to DCS/PLC at Longview TX and Kingsport locked to advisory-only mode. No autonomous setpoint writes without manual engineer approval.
👁️
Customer Isolation — Zero Trust per Account
Every B2B customer session scoped only to licensed products via Cloudflare Access at MCP gateway level. Cross-account leakage is architecturally impossible.
📋
Full Audit Log — All Models, All Routes
Every interaction across Anthropic, Workers AI, and OpenAI logged with Azure AD identity, model, tokens, cost, DLP outcome. 7-year retention.
♻️
Mass-Balance Oversell Prevention
Validates all outbound Renew designations against ISCC-certified PRT ledger. Halts designation if inventory insufficient — prevents greenwashing liability.
⚠️
Unapproved Model Block
Prevents routing to non-approved models. Currently disabled — CISO review in progress. Customer sessions restricted to Anthropic regardless.