Private by design. Here is exactly how.
Many products sold as private AI still talk to the company that made them: they download their own updates, report how they are running every few minutes, and let the vendor's engineers connect from outside. The Vault does none of this. Below is what that means in practice.
Your work is already going into AI. The question is whose.
Offices restrict what can go into public AI tools, and people use them anyway, often from personal accounts the office cannot see. These are published figures, with their sources.
of organizations admit nonpublic company information has been entered into AI tools.
limit what data staff may put into AI tools, and 61% limit which AI tools they may use at all.
of AI use at work involves sensitive data: typed prompts, pasted text and uploaded files.
uses of ChatGPT at work happen through personal accounts, where the office cannot see what is shared.
Your unique business knowledge is what sets your company apart. It deserves to stay in your hands.
Years of experience, the way you price and win work, what you know about your clients and the private records behind all of it: that is what makes your firm better at the job than the next one. Every page of it sent to an outside AI service is out of your control, where it can be kept, read or leaked, and new competitors built on AI are learning to move fast with whatever they can get.
Use AI as much as you like. Just keep the private documents that make your company special in the building.
"We do not train on your data" is not "we never see it."
The big cloud AI services let you switch off training on your data. That is a narrower promise than it sounds: it says your data will not be used to train their models. It does not say they will not keep it, read it or have people review it. Their business terms commonly still allow them to store what you send for a period and to review it for abuse, safety or legal reasons. The switch covers only training, and only if it works as described.
With the Vault there is no outside company to keep or review anything. What your team types, uploads and says stays on the machine in your office, and nowhere else.
Nothing goes out. Nobody comes in.
The Vault sits on your office network and nowhere else. It is built so that these four things are always true.
- It never connects to the internetThere is no connection out of your office. It cannot send anything anywhere.
- No one logs in from outsideNot us and not anyone else. There is no remote access to switch on, because it was never built in.
- It never reports homeNo usage counts, no health reports, no anonymous statistics. We learn how your Vault is doing when we visit.
- Your documents stay with youThey are read, searched and answered inside the machine. For support we carry away its health readings on a USB key, never your files. If the machine ever has to come to our workshop for a repair, your documents travel inside it, encrypted, and we never open them.
Updates arrive by hand.
Because the Vault is never online, it never fetches anything for itself. Everything new is carried in, by a person, and checked before it is accepted.
- Signed updates onlyA technician brings each update to your office. The Vault checks it carries our signature and refuses anything that does not.
- The license is renewed in personAt each scheduled visit, by the same people who installed it.
Protected where it lives.
Keeping the outside world out is half of it. The other half is how the machine protects what it holds.
- Encrypted, and bound to the machineIts drives unlock only inside that Vault. Taken out of the machine, they are unreadable.
- Each person signs inEveryone has their own sign in, and each person can keep a private folder that no one else in the office can see or search.
- One address, one encrypted connectionYour team opens it in a browser on your own private network, over an encrypted connection with the Vault's own certificate.
Four questions to ask any AI vendor.
These are the questions that separate a private AI from a cloud service in a box. The answers on the right are the Vault's.
What it will not do, on purpose.
Because nothing connects out, the Vault does not reach into your online email, chat or cloud drives on its own. Your files come in when your team saves them to the Vault's network folders, scans them, snaps them with a phone on the office network, or drops them in. Nothing enters unless someone in your office puts it there, and nothing is ever sent out.
If the documents you rely on live in the cloud today, we will show you the simplest way to bring copies of them in, once, at setup.