MLOps for Edge AI: Tools, Security and Ops in 2026

Navdeep Singh Gill | 09 October 2026

MLOps is the set of practices and tools that take a machine learning model from experiment to reliable production, then keep it accurate, secure and auditable. For edge AI, the same lifecycle has to work across hundreds or thousands of devices with limited compute, patchy connectivity and physical exposure. In 2026 that means packaging models for on-device runtimes, rolling them out in stages, monitoring them where they run, and keeping records that regulators can check.

Updated October 2026

What changed in 2026

  • AWS SageMaker Edge Manager is gone. It was discontinued on 26 April 2024; its APIs no longer work. AWS recommends ONNX Runtime for portable inference and AWS IoT Greengrass V2 for deployment and telemetry (AWS docs). Older guides that recommend it are out of date.
  • Edge platforms consolidated. Azure IoT Operations, an edge data plane on Arc-enabled Kubernetes, has been generally available since November 2024 (Microsoft). Qualcomm acquired Edge Impulse in March 2025 and said it would keep supporting other vendors' hardware (SiliconANGLE).
  • On-device runtimes matured. Meta and Arm made ExecuTorch 1.0 generally available in October 2025 for mobile, embedded and microcontroller targets (Embedded.com).
  • Bigger models at the edge. NVIDIA announced Jetson T3000 (up to 865 FP4 TFLOPS) and T2000 in July 2026, with modules expected in Q1 2027 (eeNews Europe). Edge MLOps now has to handle small language and vision-language models, not only classifiers.
  • LLMOps and AgentOps joined the stack. Teams now trace prompts, tool calls and agent steps alongside model metrics. The OpenTelemetry GenAI and agent conventions exist but are still in Development status (Greptime).
  • EU AI Act dates moved. The Digital Omnibus moved high-risk obligations from 2 August 2026 to 2 December 2027 (Annex III uses) and 2 August 2028 (AI in regulated products such as machinery and vehicles) (Orrick). Transparency duties and penalty powers apply from 2 August 2026 (Compliance Hub).

What MLOps is, and how it differs from DevOps

DevOps ships code. MLOps ships code plus data plus a trained model, and the model can get worse without any code change because the world it sees changes (data drift). So MLOps adds three things DevOps does not need:

  • Versioning of data and models, not just code, so any prediction can be traced back to the data and training run that produced it.
  • Continuous training (CT): retraining when performance drops or new labelled data arrives.
  • Model monitoring: tracking accuracy, drift and bias in production, not only uptime and latency.

The MLOps lifecycle, cloud vs. edge

StageCloud MLOpsEdge MLOps: what is different
DataCentral data lakeData is created on devices; most is filtered or summarised locally; sampling for retraining must be planned
TrainingCloud GPUsStill mostly cloud; federated or on-site fine-tuning for privacy or bandwidth reasons
OptimisationOptionalRequired: quantisation (INT8/FP4), pruning, compilation for the target chip
PackagingContainer imageContainer for gateways; ONNX, LiteRT, ExecuTorch or TensorRT artefacts for devices and MCUs
DeploymentBlue/green on a clusterStaged over-the-air rollout across a device fleet, with rollback if a device goes offline mid-update
MonitoringCentral logs and metricsDevices report compact metrics; must buffer when offline; drift checked on summaries
GovernanceModel registry, approvalsPlus a record of which model version runs on which device, where, since when

Edge MLOps in practice: a rollout pattern

  1. Register the trained model with its data version, metrics and intended hardware.
  2. Optimise and compile for each target (for example Jetson, Qualcomm, Arm Cortex-M) and re-test accuracy after quantisation.
  3. Sign the artefact so devices only run approved models.
  4. Canary: push to 1–5% of devices or one site; compare against the previous model.
  5. Roll out in waves by site, region or hardware type; pause automatically on error spikes.
  6. Monitor latency, confidence, input drift and device health; sample hard cases back to the cloud.
  7. Retrain and repeat, keeping the previous version ready for one-click rollback.

Microcontroller-class devices (TinyML) follow the same pattern, with smaller artefacts, tighter memory budgets and less frequent telemetry.

Edge MLOps tools in 2026

ToolWhat it doesNotes
AWS IoT Greengrass V2Deploys components and models to edge devices; MQTT telemetry back to AWSAWS's recommended path after Edge Manager
SageMaker NeoCompiles models for specific edge chipsStill documented; check your target device is supported
Azure IoT OperationsEdge data plane on Arc-enabled Kubernetes: MQTT broker, connectors, data flows; runs offline up to 72 hoursData platform rather than a model deployment tool; models run as Kubernetes workloads
Edge Impulse (Qualcomm)Data, training and optimisation for MCUs, CPUs, GPUs and NPUsStrong for sensor and TinyML use cases
ExecuTorch / LiteRT / ONNX RuntimeOn-device inference runtimesChoose by framework and target chip
MLflow, Kubeflow, cloud registriesExperiment tracking, pipelines, model registryCloud side of the loop

MLOps vs ModelOps vs AIOps vs LLMOps

These terms overlap, and vendors use them loosely. A practical way to separate them:

MLOpsModelOpsAIOpsLLMOps / AgentOps
What it managesML models through their lifecycleAll decision models (ML, rules, optimisation, LLMs) across the enterpriseIT operations, using AILLM apps and agents
Main usersML engineers, data scientistsRisk, governance and business owners plus ML teamsIT ops and SRE teamsAI engineers, platform teams
Core tasksVersioning, CI/CD/CT, deployment, monitoringInventory, approval, risk tiering, audit, retirementAnomaly detection, event correlation, root-cause analysisPrompt and model versioning, evaluation, tracing tool calls, cost and safety guardrails
Question it answers"Is this model working in production?""Which models do we run, who approved them, and are they still fit?""Why is the system down?""Is this agent doing the right thing, safely, at what cost?"

In short: MLOps is the engineering core; ModelOps is the governance layer above it; AIOps uses AI to run IT; LLMOps and AgentOps extend MLOps to language models and agents. At the edge you usually need MLOps plus a ModelOps-style inventory of what runs where.

The 7 layers of MLOps security, for edge deployments

LayerMain riskEdge-specific control
1. DataPoisoned or leaked training dataValidate data provenance; strip personal data on device
2. Data storageTheft of datasets and featuresEncrypt at rest; least-privilege access; local buffers encrypted
3. Pipeline / orchestratorTampered training or build jobsLocked-down CI/CD; signed pipeline steps; secrets in a vault
4. ModelModel theft, backdoors, adversarial inputsSign and hash models; adversarial testing before release
5. Model hostingCompromised device or runtimeSecure boot, trusted execution where available, runtime attestation
6. Exposure / APIsAbuse of inference endpoints; prompt injection for LLMsAuthenticated APIs; rate limits; input filtering; tool permissions for agents
7. Logging and monitoringAttacks going unseenTamper-evident logs; alerts on drift and odd query patterns; offline buffering

Physical access is the difference at the edge: an attacker can hold the device. Assume the model file can be copied, and protect what matters (keys, data, the update channel) accordingly.

What happened to SageMaker for edge MLOps

SageMaker remains a full cloud MLOps platform: Pipelines, Model Registry, Model Monitor, Experiments and Autopilot. What changed is the edge piece. SageMaker Edge Manager, which packaged models and managed device fleets, was discontinued on 26 April 2024. Leftover resources such as S3 packages and IoT things can still incur charges until you delete them (AWS docs).

A typical 2026 AWS pattern: train and register in SageMaker, compile with Neo or export to ONNX, deploy with Greengrass V2, and send telemetry back to SageMaker Model Monitor or S3. Teams that run multi-cloud or multi-vendor hardware often use a vendor-neutral edge platform instead.

Regulation: what edge MLOps teams must record

The EU AI Act does not use the word MLOps, but its high-risk duties (risk management, data governance, logging, human oversight, accuracy and robustness) map closely to MLOps practice. Under the 2026 Omnibus, they apply from 2 December 2027 for Annex III uses and 2 August 2028 for AI inside regulated products such as machinery (Orrick). Teams that already log model versions per device, training data versions and approvals will have little to retrofit.

Where it's heading: 2026 → 2030

AreaAround 20202026 (now)By 2028 (expected)By 2030 (expected)
Edge deployment toolsCloud-vendor edge managers launched (incl. SageMaker Edge Manager)Edge Manager discontinued (Apr 2024); Greengrass, Azure IoT Operations, vendor-neutral platforms (AWS)Kubernetes-based edge platforms as the default for gateways—
On-device runtimesTensorFlow Lite, framework-specificExecuTorch 1.0, LiteRT, ONNX Runtime (Embedded.com)Fewer, more portable runtimes—
Edge hardwareSmall CNNs on Jetson Nano-class boardsJetson Thor family; T3000/T2000 modules due Q1 2027 (eeNews Europe)Small language and vision-language models common on gateways and robots—
ObservabilityModel metrics onlyGenAI and agent tracing conventions in Development (Greptime)Stable shared conventions for model, LLM and agent telemetry—
RegulationNone AI-specificAI Act transparency and penalties apply; high-risk deferred (Compliance Hub)Annex III high-risk from 2 Dec 2027; Annex I from 2 Aug 2028 (Orrick)Public-authority deadline 2 Aug 2030 (Orrick)

Cells without a source are editorial expectations, not sourced forecasts.

How NexaStack helps

NexaStack is an edge AI platform for running models on gateways, robots, vehicles and industrial PCs. It handles packaging, staged over-the-air rollout, rollback, on-device monitoring and a record of which model version runs on which device, across mixed hardware and clouds.

For a worked example of edge models in production, see our guide to predictive maintenance with IoT and AI.

Frequently asked questions

What is MLOps and why is it used?

MLOps is the practice of building, deploying and running ML models reliably in production. It is used because models degrade as real-world data changes, and without versioning, monitoring and retraining, nobody notices until results go wrong.

What is MLOps vs DevOps?

DevOps automates building and releasing software. MLOps adds data versioning, model training and retraining, and model performance monitoring, because a model can fail without any code change.

Does MLOps need coding?

Yes, mostly. Python and familiarity with containers, CI/CD and cloud services are standard. Managed platforms reduce the code needed for pipelines and deployment, but not to zero.

What is the difference between MLOps and ModelOps?

MLOps covers the engineering lifecycle of ML models. ModelOps is broader: it governs all decision models across an organisation, including approval, risk tiering and retirement.

Is SageMaker Edge Manager still available?

No. AWS discontinued it on 26 April 2024. AWS suggests ONNX Runtime plus AWS IoT Greengrass V2 for edge deployment and monitoring.

Run edge MLOps across your device fleet

See how NexaStack packages, signs, rolls out and monitors models across gateways, robots and vehicles, with a per-device record of what runs where. Book an edge MLOps fleet assessment →

Table of Contents

navdeep-singh-gill

Navdeep Singh Gill

Global CEO and Founder of XenonStack

Navdeep Singh Gill is serving as Chief Executive Officer and Product Architect at XenonStack. He holds expertise in building SaaS Platform for Decentralised Big Data management and Governance, AI Marketplace for Operationalising and Scaling. His incredible experience in AI Technologies and Big Data Engineering thrills him to write about different use cases and its approach to solutions.

Get the latest articles in your inbox

Subscribe Now