Cloud AI is metered, foreign-hosted, and rented by the token. Arsenale runs frontier-class models on hardware you own. Sovereign by construction, under £0.01 per agent decision, zero data egress.
From £2,499 · Limited launch batch · early adopter pricing
The sectors where on-premise, air-gap-capable, customer-owned hardware isn't a compromise. It's the requirement.
Law firms and conveyancers: privileged files and matter data can't go into a foreign cloud without breaching client confidentiality. The appliance reads, drafts and cites case files on hardware you own, filed by matter; nothing leaves the building.
Read the full case →Accountancy practices: client ledgers, returns and management accounts stay on your own hardware. Exact figures, traceable to source and ready for an auditor, with no client data crossing a border.
Read the full case →Regulated workloads where data residency, third-country transfer rules, and operator-continuity expectations (DORA, FCA SYSC) make foreign cloud genuinely inappropriate. UK-domiciled compute on hardware you own.
Talk to us →Sovereign compute for command, control, ISR, and tactical decision support. Air-gap-capable. No cloud dependency in theatre. The agent runtime that runs business operations runs operational decision loops too.
Talk to us →AI on every knowledge-worker desk, off the foreign cloud, off the recurring-opex line. Per-desk economics that compare to a standard workstation refresh, not a SaaS contract.
Read the full case →Patient-record-grade data sovereignty by construction. The appliance lives on the trust's network, on the trust's hardware, with no foreign cloud in the loop and no patient data leaving the building.
Talk to us →Energy, water, transport, telecoms: operators where outbound connectivity is a risk surface, not an assumption. Air-gap deployment as the default, not the exception.
Talk to us →Police, justice, border, emergency services: environments where evidence integrity, audit trails, and chain of custody are operational requirements, not nice-to-haves. Tamper-evident logs that live with you.
Talk to us →The cloud meters every prompt, on machines you don't control.
Arsenale flips it. Your agents, on your hardware. Your data never leaves the building.
They don't just advise. They act, in the systems you already run.
Approved payments are coming. You authorise every one before money moves.
The hard part of local AI isn't buying the hardware, it's making it usable. Most attempts hit one of two walls: the models worth using won't fit, or they fit but crawl. The appliance clears both: large models that fit and answer in real time. That's the part the spec sheet won't sell you.
An Arsenale appliance is a complete operating environment, not a model in a box. Talk to your agents in plain English, watch them work in real time, and sign off on anything that matters before it happens. The surfaces below are taken from a production appliance, with identifying details redacted.
A whole computer, ready to work. The appliance boots into its own hardened, Linux-based operating system: desktop, browser, files and console included. Nothing to install, nothing to administer, nothing phoning home.
Nothing happens without you. Agents draft the filings, the payment runs, and the contract responses, and every one of them waits for your sign-off. You stay the executive; they handle the volume.
A calendar that fills itself. Statutory deadlines are derived from the public record, recurring spend is recognised from your own ledgers, and everything is priced in pounds before it falls due.
Anything I need to act on this week?
Two items. Your confirmation statement is due on ; the draft is prepared and waiting for your sign-off. And a supplier agreement renews on with changed terms. Nothing else needs you.
What changed in the terms?
The notice period drops from to days and the annual fee rises by . I've flagged the clause and drafted a response for your approval.
Secrets that never leave. An offline, encrypted credential vault lives on the appliance. Passwords and one-time codes stay on hardware you own, with nothing synced to anyone's cloud.
Spreadsheets you can trust. Built for the work where the figures have to be right, VAT, reconciliations, management accounts. Describe what you need in plain English and get a working spreadsheet back, every number traceable to its source and ready for an auditor.
Your case files, never online. Drop engagement letters, contracts and correspondence onto the appliance and your agents read, search and cite them, filed by matter. Everything is indexed privately on hardware you own; nothing is uploaded and nothing leaves the building.
Captured from a production appliance. Names, dates, and figures redacted. See it on your own desk →
A glance at how the appliance handles real work on hardware you own. Pick your field.
Representative of the on-box workflow. Names, figures and dates redacted.
What the appliance does today, running on the machine in your office. Anything with real-world consequence waits for a person to review and approve it.
Ask for a figure and withhold the document behind it, and it tells you it cannot answer rather than inventing one. Figures come with their source and the date they were retrieved, not made up to fill a gap.
Bookkeeping, balance sheet, VAT return and corporation-tax preparation from your own records, with figures that reconcile exactly and stand up to an auditor.
A spreadsheet where every number traces back to where it came from and the arithmetic is exact. Numbers you can hand to an auditor, not ones a model invented.
Letters, contracts, notes and standard forms drafted from your own files for someone to review and sign off. It can draft and send business email too, but only after you approve each one.
Tracks matters and clients separately, computes deadline-critical dates with the authority behind each, and keeps diaries that never bleed from one file into another.
Set an objective and it works toward it across days, remembering progress between runs, on a visual schedule you control.
The entire stack runs on a single machine: model, runtime, agents, dashboard, all under one roof. No internet required for inference. No tokens metered. No vendor lock-in. No data egress. The cloud's failure modes (outages, rate limits, pricing changes, jurisdictional risk) are not failure modes for Arsenale because the cloud is not in the loop.
Frontier-class models on your hardware
Zero outbound traffic for inference
Air-gap capable
Hardware-bound licensing
Cryptographic update protocol
Persistent agent memory
Cross-agent shared intelligence
Outcome tracking and learning
Real-time operations dashboard
Single-box or distributed deployment
The Arsenale di Venezia was the first mass-production facility in human history. At its peak, 16,000 workers could build a fully-equipped warship in 24 hours. Assembly-line manufacturing, centuries before Henry Ford. The English word "arsenal" derives from the Venetian Italian "arsenale."
We took the name because we're building the same thing for intelligence. A production facility, not for ships but for autonomous agents that do the work of entire departments. Same city. Same principle. New century.