One codebase, two modes: managed cloud, or fully air-gapped on your hardware. Switching between them is configuration — never a fork.
Isolation enforced in the data layer, not the UI — and proven by dedicated tests that gate every release.
Models see your context at inference time only. Your problems and knowledge base never become training data — for anyone.
On-premise, a complete coaching session makes zero external network calls. Architecture, not policy.
Two capabilities are local in every deployment, by design: speech-to-text runs on local Whisper, and retrieval embeddings are computed locally. Voice from your shop floor and the content of your knowledge base are never sent to a third-party speech or embedding service — in either mode.
| Capability | Solve Cloud | Air-gapped on-premise |
|---|---|---|
| Reasoning model | Anthropic Claude API | Local open-weight model |
| Speech-to-text | Local Whisper — on our servers | Local Whisper — on yours |
| Retrieval embeddings | Local models | Local models |
| Text-to-speech | ElevenLabs API | Local Piper TTS |
| Database | Managed PostgreSQL (UK/EU) | Local PostgreSQL, encrypted volume |
| File storage | Object storage, encrypted | Local encrypted volume |
| Transactional provider | Customer SMTP — or none | |
| Updates | Continuous, staged releases | Signed offline packages |
| Internet required | Yes | No — fully disconnected |
The standard we hold the platform to, across both deployment modes.
Invitation-only accounts, TOTP two-factor with per-company enforcement, SSO (SAML / OIDC) on Enterprise. Enumeration-hardened, per-client lockout.
One role authority for every capability — including a content-blind operator role. The role-by-route matrix is tested on every release.
Containerised, non-root. Tests and dependency audits on every change, staging before production, one-command rollback. Secrets in a secrets manager — never on disk.
A living compliance pack: posture docs, completed vendor questionnaire, DPA, sub-processor list, residency statements, incident-response plan.
Managed in UK/EU regions. Instant start — the default for most sites.
A dedicated deployment in your chosen region — managed by us, sovereign to you.
On your hardware, installed from offline media with signed updates. For defence and export-controlled work.
Bring your hardest questions — data flow, isolation, model behaviour, failure modes — and we'll walk the platform end to end with your engineers.
Book a technical review