Security
Data stays on a machine you own.
That is the product. We will not dress it up as a certification we do not have.
What is true today
- Prompts, files, and outputs are meant to stay on hardware you control.
- A frontier lab does not see the corpus to answer a question.
- Egress starts off. Updates can be refused.
- Disk encryption is on before the unit leaves us.
- A local status page shows model, disk, and outbound state.
- You can unplug the box. It is yours.
Lines we will not cross
- HIPAA compliant, HIPAA ready, or BAA language.
- SOC 2, ISO 27001, or “examiner-ready.”
- Zero risk. Zero egress as a certified fact.
- Beats Claude, GPT, or any named frontier model.
- Named customers, case studies, or revenue we do not have.
- Medical or legal advice. We sell a box and an app.
Threat model, simply
This solves the paste problem. Not every problem.
It is for
An associate who would otherwise drop a client memo into a lab chat. A deal team that will not upload the IC deck. An operator who will not put the pricing sheet in someone else’s cloud.
It is not for
Someone who walks the unit out of the building. A compromised laptop on the same LAN. A firm that needs a signed audit letter this quarter. Those are different products and different paperwork.
Physical reality
If someone has the box, they have the box. Encryption helps. Policies help. We will not pretend a marketing site is your incident plan.
Medical
Later. Paperwork first.
We may serve clinical operators later. Until then this site makes no HIPAA claim, no treatment claim, and no “hospital-ready” claim. If that is your need, say so on the inquiry — we will be honest about timing.
Inquire