The models that would help government most are the ones it cannot lawfully send to a foreign cloud: case files, digital evidence, citizen records. Arsenale runs a frontier-class model and an agent workforce entirely on hardware the department owns and physically holds. Nothing leaves the box, because there is nowhere for it to go.
Most sovereign-AI propositions are a plan. This one is built. A complete appliance has come off our own factory process, and the process is repeatable.
A complete appliance was built and verified on our own factory process in August 2026. It self-provisioned over the bench network and hash-verified its full model payload before it was certified.
Before a unit is certified it must pass a multi-point verification gate: exactly one disk keyslot remains, so only the owner's passphrase opens it; no factory key survives in the ramdisk; no support access is left installed; the model payload is present and hash-correct.
Provisioning is automated end to end. Every unit is uniquely keyed and its record registered as it is built, encrypted to an operator certificate. This is manufacturing to a standard, evidenced afterwards.
The platform runs our own organisation's daily operations today: an agent workforce handling filings, financial review and correspondence. This is an internal deployment, and we describe it as one; the system is exercised under real conditions rather than demonstrated.
No UK government deployments to date; the live deployment is our own. Figures elsewhere on this page are labelled as measured or indicative, and we do not claim certifications we have not earned.
The objection to AI in government is rarely capability. It is that adoption seems to imply a central database of citizen data, or citizen data resident in a foreign-owned cloud. This design does neither, by construction.
Units sit physically wherever the department puts them, and each holds only that department's data. There is no central pool to breach, no shared tenancy to misconfigure, and no cross-departmental data flow unless one is explicitly and separately authorised. A federation of sovereign nodes is not a policy commitment that has to be audited; it is a property of the topology. For a department handling casework on individuals, that is the difference between assurance by promise and assurance by architecture.
The sharpest fit is the work where the data is at once the highest in volume and the least able to leave the premises.
Device extractions, imagery and communications are exactly the material frontier models can triage at scale, and exactly the material that cannot lawfully be handed to a hyperscaler API. An appliance inside the force's own estate closes that gap: evidence is triaged where it already sits, under existing custody, with no third-party processor and a local audit trail. Scaling is adding nodes, not enlarging a central system.
Fragmented data sharing stalls because the instinctive fix is a shared platform with a central custodian every party must accept. A federation inverts it: each organisation keeps its own node and its own data, and what crosses the boundary is a query and an answer, not a copy of a record. The information-sharing agreement then governs questions rather than bulk transfer.
The appliance functions on isolated networks, with updates applied by signed offline packages. For work where outbound connectivity is itself the risk, on-premise inference is not merely preferable; it is the only route by which modern models can be applied at all.
Four directions of travel inside government IT are all moving the same way at once. Arsenale sits at their intersection, not by repositioning, but by construction.
| Trend | Where it shows up | Arsenale |
|---|---|---|
| AI on every desk | Productivity programmes across DWP, HMRC, MoJ, NHS commissioning. Knowledge-worker workflows are the next site of public-sector productivity gain. | ✓ |
| Off the incumbent desktop | Schleswig-Holstein migrating ~30,000 state workstations to Linux + LibreOffice. France's Gendarmerie Nationale on GendBuntu (~80,000 PCs). European Commission off Microsoft 365 post-EDPS ruling. UK Cloud-First posture under quiet re-examination. | ✓ |
| Off the foreign cloud | Citizen and case data cannot legally leave UK soil for benefits, tax, court, NHS or safeguarding workloads. Hyperscaler concentration risk flagged by NCSC. | ✓ |
| Capex over opex | Vendor cloud and licence costs up 20–40% across 2023–2025. Treasury squeeze on recurring software spend. Owned hardware pays itself back inside refresh cycle. | ✓ |
References to specific government bodies indicate workload categories that fit Arsenale's deployment profile. No claim of existing UK government contract is implied.
Sovereignty fails the moment it costs more than the incumbent option for the same work. The honest comparison is not AI versus no AI; it is sovereign-by-default AI against cloud AI on the existing fleet, and against a bespoke on-premise cluster build.
| Dimension | Cloud AI on existing fleet | Bespoke on-prem cluster | Arsenale |
|---|---|---|---|
| Data residency | Leaves UK soil | Sovereign, complex to build | Premises-local by default |
| Asset ownership | Rented in perpetuity | Shared cluster, ops-heavy | Owned outright |
| Pricing exposure | Per-seat metering, vendor rises | Cluster vendor lock-in | Fixed at purchase |
| Integration burden | Low, but sovereignty unavailable | High, months of operations | Ships as one working unit |
| Unit price | Per-seat, ongoing | Bespoke capital plus operations | Indicative; confirmed at order |
Where citizen or case data cannot lawfully leave the premises, the cloud option is not a cheaper alternative; it is not an available one. Unit pricing is indicative and confirmed at order, reflecting current memory-market conditions.
The shift away from the incumbent desktop is not a UK-only signal. Comparable governments have published, funded, and begun executing the same migration.
State government migration of approximately 30,000 workstations from the proprietary desktop to Linux and LibreOffice. Announced 2024, in execution. Stated motivations: licensing cost, digital sovereignty, vendor exit-cost.
Approximately 80,000 PCs on a custom Ubuntu derivative (GendBuntu), in production for over a decade. Cited by EU peers as the canonical proof that government desktops can run on Linux at scale without operational compromise.
Migration off Microsoft 365 following the European Data Protection Supervisor's 2024 ruling that the platform did not meet GDPR transfer requirements. Replacement architecture explicitly favours sovereign and on-premise stacks.
A single appliance. UK-built, UK-shipped, UK-supported. Five years of operating-system security updates included from the day of installation. The annual licence covers new model versions, agent capability releases, and runtime upgrades.
| Form factor | Desk-side appliance, fan-quiet, standard 100–240V power |
| Inference | Frontier-class model running locally with 96GB system memory, real-time responses |
| Cost-per-decision | Under £0.01, unmetered |
| Data egress | Zero by default. Air-gap supported. |
| Operating system | Syntex OS: UK-developed Linux-based platform, hardened for sovereign deployment |
| Productivity suite | LibreOffice included by default. Reads and writes Microsoft Office formats (.docx, .xlsx, .pptx) and OpenDocument natively, with no cloud dependency. Aligns with the Schleswig-Holstein and Gendarmerie Nationale precedents above. |
| Update channel | Cryptographically signed OTA updates, hardware-bound licensing |
| Security commitment | 5 years of OS security updates included from purchase. Annual licence extends past that horizon. |
| Procurement routes | Registered UK government supplier; direct purchase available now. Framework listings (G-Cloud, CCS Technology Services) pursued at the next application window. |
For procurement, policy, and innovation teams across central government, devolved administrations, local authorities, and adjacent public bodies. A briefing covers the appliance specification, sovereignty posture, deployment model, indicative pilot economics, and a live demonstration of the agent runtime. Held remotely or in-person at the registered office.
Request a briefing →