Air-gapped AI servers, installed inside your building.
Your data never leaves the building. It cannot.
We design, procure, install and maintain a complete air-gapped AI estate on your premises: the hardware, the open-weight models, a retrieval layer built on your own documents, the training of your people, and a standing service that keeps it current. There is no route to the outside world. Not a policy against one — no route.
Frontier AI. No wire.
Bengaluru. Installations across India. Prices are published, on the pricing page, where they belong.
The situation
The material that matters most inside your firm is the material you are least permitted to move. The data room. The client's ledgers. The privileged file. The consolidated family balance sheet. The transaction nobody has announced.
Artificial intelligence turned out to be genuinely useful on exactly that material — long documents, inconsistent formats, cross-referencing, drafting, extraction, recall across years of files. It is also the first technology that requires you to send that material away in order to use it.
Every mainstream answer to this is a promise. A retention clause. A region on a map. An assurance that nobody is looking. These are real commitments, made by serious companies, and they are all the same category of thing: an assurance that a capability which exists will not be used against you.
Ours is a different category of thing. The capability does not exist. There is no wire.
What we install
An estate, not an appliance. The box is roughly a third of the work.
The room
A workstation in a locked cabinet, or a rack in a server room, depending on the size of the firm. Wi-Fi and Bluetooth hardware physically removed at build — not disabled in software. A single cable into an isolated segment with explicit deny-all egress. Management interfaces on their own VLAN with no route outward. Tamper-evident numbered seals, photographed.
The models
Frontier-class open-weight models on your own storage: a flagship reasoning model, a multimodal retriever that reads scanned pages as images rather than depending on OCR, a document model, speech-to-text including Hindi, Kannada, Tamil and Marathi, and a coding model where the firm has engineers. Every licence listed in a schedule attached to your contract, because your counsel will read it.
The corpus
The retrieval layer is built on your actual documents — twenty years of matters, working papers, deal files, whatever exists — with access defined by group and by matter, the way your firm already works. Answers cite back to the source page, so verification is one click.
The people
Training for the people who will use it, written for the way your firm works rather than for a product tour. Named engineers with personal contact details and an escalation ladder.
The currency
Four visits a year with the season's models on sealed media. See below.
How an installation works
-
Consultation — 45 minutes, no charge.
A briefing rather than a sales call. Your situation, an honest read of whether this fits, and in roughly a third of cases a recommendation not to proceed. A mutual non-disclosure agreement, pre-signed by us, is attached to the calendar invitation as standard. You do not have to ask.
-
Assessment — paid, credited in full.
Two to three weeks. Site survey covering power, earthing, cooling and floor loading; a review of your corpus and where it actually lives; the access model; and written findings containing a section titled What will not work. If the answer is that you are not ready, we say so and hand the work back.
-
Pilot — paid, credited in full.
Eight weeks. A smaller machine installed in your office, loaded with your real documents, with the full retrieval, document and transcription stack and a half-day of training. Your people, your questions. Credited in full against any plan signed within ninety days, and if you do not proceed you keep the machine. Paid deliberately: a free pilot is a demonstration, a paid pilot is a decision.
-
Commissioning Plan.
Not a proposal and not a quote. An engineering document: floor plan, rack elevation, power and thermal calculations, bill of materials with part numbers, the model set with licences and hashes, the access model, the training schedule, named engineers, dates, acceptance criteria, price, and a decommissioning clause.
-
Installation and handover.
Built and burnt in at our lab, delivered, racked, and accepted against your own documents in front of you. Handover is a twenty-minute ceremony with the managing partner present: the commissioning report with photographs, the topology diagram, hardware serials, model provenance and hashes, the engineers' cards, the service schedule, and the keys.
-
The courier run — every quarter, thereafter.
The courier run
New models arrive the way cash does: by hand, in a case, signed for.
Each quarter an engineer travels to your office carrying that season's models on sealed, hashed media. They are installed in front of you and benchmarked against your own documents — not against a public leaderboard. You accept them or you decline them. The engineer leaves with the media and nothing else, and you sign for it.
Two weeks before the visit you receive the Model Register: what we propose to install, what we have decided not to install, and why. The refusals are the more useful half of that document.
This is why an air gap does not mean a frozen system. The models change four times a year on the same hardware, and the weights you already hold do not stop working when something newer appears.
The commitment, in the words it appears in your contract:
We will visit your site four times a year. At each visit we bring, verify and install the current best open-weight models your hardware can run, and we will not install anything that scores worse on your own documents than what you already have.
What that promise deliberately does not include: any specifically named future model, because nobody can know what will ship; same-quarter availability of anything released mid-quarter, because staging takes about three weeks; any model whose licence we have not cleared for commercial use at your firm's size; and capability improvements on a fixed schedule, because the field moves in bursts rather than in quarters.
Who this is for
Firms whose most valuable asset is also their most confidential, and where a single disclosure would be worse than a year of inefficiency.
- Investment funds, PE and AIF managers — the data room, the diligence you declined to accelerate, and the LP questionnaire that asks where deal files were processed.
- Chartered accountancy firms — clients' books, working papers and thirty years of prior-year files, with nothing leaving the premises and no consent conversation to have.
- Law firms — privilege survives, because nothing is transmitted.
- Analytics, research and consulting firms — client NDAs that prohibit third-party processing, and data-processor obligations of your own.
- Family offices — the family's complete financial picture, in one place that has no outside.
- Corporates — for the general counsel's side of the business, and for the CISO who would rather remove a threat class than mitigate it.
Who this is not for
We would rather lose the enquiry now than the deal in month five.
- If your work is not confidential, you do not need us and should not buy from us. Keep your cloud subscription. It is a better product for general business use and it is cheaper to start.
- If you want the very top of the capability curve for non-confidential work, that is a cloud tool. We will tell you which jobs belong where, and we expect most firms to run both.
- If your premises cannot take a dedicated circuit and twenty-four-hour cooling, we will find that at the survey and say so before you have spent anything meaningful.
- If you want the hardware only, we will recommend a specification and a vendor at no charge, and decline the work. A box delivered is not an estate installed, and in a year our name would be on a machine nobody uses well.
- If you are a very large organisation with a data centre and a multi-year mandate, a hyperscaler's air-gapped offering or a systems integrator may genuinely be the better fit. We are built for the forty-partner firm, not the twelve-thousand-person one.
What you can check yourself
We do not ask to be trusted. We compete by making trustworthiness unnecessary, including our own.
Pull the cable
During the demonstration you disconnect the network — or power down the switch — and the system carries on answering questions about your document. Ten seconds. No slides.
Look at the back of the machine
It is opened in front of you. The radio hardware is absent because it was removed at build, the unused ports are physically blanked, and the state is photographed and attested in your commissioning report.
Follow the diagram
One page, no jargon, showing every wire in the room and where each one ends. A managing partner should be able to read it without help.
Read the register
What we installed last quarter, what we declined, and why — published, dated, and archived.
Check this website
It sets no third-party cookies, loads nothing from any host we do not run, has no chat widget, no advertising pixel, and no tracker. That is verifiable from your browser's network tab in about ten seconds, and we would rather you checked. Colophon.
A Mumbai credit fund. 34 users. Eleven weeks from assessment to handover.
We decline to name clients, always — including when a client offers. Confidentiality is the product.
What an air gap does not protect you from
Stated first, unprompted, because our category attracts absolutist claims and absolutist claims are what a risk-averse professional discounts.
An air gap removes the network as a vector. It does not remove people. It does not stop someone photographing a screen, printing a document, or repeating what they read. It does not replace access control, logging, or a sensible internal policy — we will help you write those, but they remain yours.
There is also a definitional point that most vendors leave vague, and we will not. What firms call "air-gapped" almost always means no route to the internet, with users reaching the machine over an isolated internal segment. A literal air gap — no network at all — means carrying every file in and out on removable media, which no fund or law firm will tolerate in practice. We state in writing, in every Commissioning Plan, exactly which one you are getting and where the boundary sits.
And on capability: open weights are not ahead of the best proprietary models at the very top of the curve. On the work you will do with this — reading long documents, extraction, cross-referencing, drafting, recall across years of files — the difference is small and narrowing. Where it matters, we will tell you.
What an estate costs
Published, because a buyer who arrives price-aware is halfway there, and because "contact us for pricing" reads as the price depends on how much we think you'll pay.
| Plan | Profile |
|---|---|
| Sentinel | 15–40 users. Boutique fund, CA practice, law firm. No server room — a locked cabinet and a dedicated circuit. Eight models. |
| Praetorian | 150–400+ users. Rack-scale, redundant, 24×7. Requires a real server room. Twenty models and more. |
The numbers for each plan — the capital figure and the annual service figure — are on the pricing page. Before a plan there are two smaller steps, both paid and both credited in full: the assessment, and the eight-week pilot, credited against any plan signed within ninety days, with the machine yours to keep either way.
The second column is the one to read
The annual figure appears here, in rupees, beside the capital figure — not as a percentage, not in a footnote, and not raised once the capital number has been agreed. A cost that arrives late is the fastest way to lose a serious buyer, and it is also how most infrastructure is sold.
It is not a support contract. It is what keeps the estate at the frontier while it stays disconnected: four visits a year, of which at least two install new models; phone support for your named administrators; a monthly health report produced from a diagnostic bundle you generate and you choose to send, because we cannot see your system and do not pretend otherwise; quarterly evaluation of new models against your own documents; dust, filter and thermal service; UPS load testing; spares held to your plan's terms; and an annual air-gap integrity audit with a written attestation you can hand to a client, an auditor or an insurer.
The first year is mandatory and not negotiable. An air-gapped system with no maintenance path is a liability, and we will not create one and walk away. Thereafter it renews annually on a three-year initial term, escalating at 8% a year or CPI plus three, whichever is lower. If it lapses and you want it back, there is a paid recommissioning audit first — we say that at signature rather than at renewal.
Four other things worth saying plainly
The 18% GST is recoverable as input credit by any GST-registered firm, so your effective cost is the figure above. Civil, electrical and cooling works are yours to contract directly and sit outside our quote — we will specify them, we will not mark them up, and we will not carry construction risk. Quotes are valid for ten days with the exchange rate printed on the face of them, because hardware pricing moved 55% on one card in sixteen months and a sixty-day quote would be an uninsured position. Payment is 50% with the order, 40% on delivery to site, 10% on acceptance.
And we do not discount. If the number is wrong for you, we will scope a smaller estate at the same rate. A discounted security product tells you the security was padding.
Questions we are asked
Open models are behind the leading proprietary ones.
At the very top of the curve, yes, and we will not pretend otherwise. Two things, though. On the work you will actually do with this — reading long documents, extraction, cross-referencing, drafting, recall across years of files — the open models are now in the same class, and the gap narrows every quarter. And the real comparison is not open versus frontier. It is this versus nothing, because the material we are discussing is not going into any AI today; it is going into a partner's head and a highlighter. If you want the frontier for non-confidential work, keep your cloud subscription and we will tell you which jobs belong where.
How do upgrades work if it is air-gapped?
By hand, and deliberately so. Each quarter an engineer comes to your office with that season's models on sealed, hashed media. We install, we benchmark against your documents in front of you, and you accept or decline. The engineer leaves with the media and nothing else, and you sign for it. It is the same trust structure as a cash consignment, and it is the reason air-gapped does not mean frozen. You get the Model Register beforehand — what we propose, and what we have decided not to install and why.
Our IT team can do this.
They almost certainly can, and if your IT lead has already run a local model, that is the best signal we could get about this firm. The hard part is not standing it up, it is owning it for four years. Model evaluation is now a quarterly specialist job. The retrieval index drifts from your document system unless somebody tends it. The person who built it gets pulled onto something else. What we sell is not the build; it is the certainty that in month nineteen it is still current and still used — because a stale internal system does not fail loudly, it quietly gets bypassed, and then your people are back on their phones. We want your IT lead running this. We are the standing capability behind them, with their name on the topology diagram.
Our people will use their phones anyway.
They already do. That is the strongest argument for doing this, not against it. Shadow AI happens when the sanctioned tool is worse than the unsanctioned one — people are not being reckless, they are being effective. The fix is not policy; it is making the internal tool genuinely better on the firm's own material, which it is, because it has read everything the firm has and their phone has not. Adoption training is part of the deployment for precisely this reason.
We already have an enterprise subscription with a no-training clause.
Keep it. It is good, and most of your work should stay there. That clause is a real commitment and I would take it at face value. But it is a commitment about use, not about possession: the file still travels, is still processed on infrastructure you do not control, and is still reachable by lawful process in another jurisdiction. For eighty per cent of what your firm does that is fine. This is for the other twenty per cent — the material where you would be uncomfortable explaining the arrangement to the client whose data it is.
Air-gapped sounds unusable. Do our people lose internet access?
No. Nothing changes about anyone's desk. The estate sits on its own isolated segment and your people reach it the way they reach any internal application. It simply cannot reach outward, which means it cannot browse the web, so anything requiring live external information is not its job — and we will be specific at assessment about what falls outside its remit. Getting documents in is a defined process, not a restriction on anyone's working day.
Who has access, including your engineers?
Access inside the firm is yours to define, by group and by matter, and we will help you set it up. Our engineers have no standing access of any kind — no remote access exists, because there is no route. We are on site, escorted, at times you schedule, and every visit is logged in a service record you hold. If you want a member of your own IT team physically present for every session, that is the normal arrangement rather than a special request. We would rather be inconvenienced than trusted.
What if you cease to exist?
You still own everything: the hardware, the weights, the retrieval index, the configuration and the documentation. All of it is on your premises and none of it reports back to us. There is no licence key that expires and no server of ours that has to stay up. Your continuity options are named in the contract, and we build deliberately on standard hardware and openly licensed weights so a competent third party can take over. Compare that with a hosted model being deprecated, which is a dependency you cannot engineer around.
What happens when the hardware fails?
It will, eventually — that is a sparing question, not a design flaw. We hold spares, and depending on tier they sit in your building or ours with a stated restore-to-service time in the contract. Larger estates are built so a single failure degrades speed rather than availability. Note the shape of the risk: our failure mode is downtime, which is inconvenient and recoverable. The other architecture's failure mode is disclosure, which is neither.
Can we rely on the answers?
Not blindly, and I would be wary of anyone who told you otherwise. It is built to cite: answers point back to the source document and page, so verification is one click, and we train your people to treat it as an exceptionally fast, exceptionally well-read junior who must be checked. It is also why we evaluate on your corpus rather than on public benchmarks — so you know its accuracy on your material rather than on somebody's leaderboard.
Every question we are asked, answered at length, is in the dossier. Call +91 96795 13231 and ask for it.
The next step is a paid assessment.
Two to three weeks, credited in full against deployment. A site survey, a review of your corpus, the access model, and written findings that include what will not work.
Before that there is a forty-five minute consultation, at no charge, with a mutual non-disclosure agreement attached to the invitation. If the honest answer is that this is not right for you, or not right yet, you will hear it in that conversation rather than in month five.
Physics, not promises.