Boots only what we sign
Secure Boot runs on our own keys. Foreign boot loaders are refused, and a drive brought from outside cannot unlock the disk.
Syntex OS
A whole computer, built around its agents.
Every unit runs Syntex OS, our own hardened operating system. It starts to a desktop with the Arsenale app, a browser, files and a terminal, and everything on it stays on the unit.
The desktop
Ready to work at first power-on.
A passphrase at power-on unlocks the disk, then the desktop opens with the Arsenale app in its own window. It follows your light or dark setting and reopens itself after an update.
The Arsenale app
Your agents, in one window.
Talk to your agents in plain English, follow their work as it happens and switch between the companies you run. Live meters show what the unit is doing.
- One approvals screen for everything waiting on a person
- Emails shown in full, and editable, before they go
- Final actions ask twice; batches approve in one pass
The private suite
The tools a sensitive office needs, kept on the unit.
Syntex Vault
An offline password manager. Passwords and one-time codes stay on the unit, with nothing synced to anyone’s cloud.
Syntex Grid
Spreadsheets for the work where the figures have to be right, from reconciliations to VAT, with every number traceable to its source.
Documents
Contracts, letters and correspondence filed by company or matter, indexed privately on the unit and readable by your agents.
Set-up
Set up on screen, in one sitting.
No terminal and no installation work. The unit walks you through each step and checks itself at the end.
- 01
Licence and agreement
The licence is already on the unit. Read and accept the agreement.
- 02
Network and updates
Join a network if you want one, and take the latest release.
- 03
Your account and organisation
Create your account and give your company number; the agent team is built from the public record.
- 04
Start-up unlock and recovery key
Choose how the disk unlocks at power-on, and keep the twelve-word recovery key that is shown once.
- 05
System check
The unit tests itself and opens the desktop.
Security
Secure from the moment it powers on.
A disk sealed to the unit
The disk is encrypted and unlocked by the unit’s security chip with a start-up passphrase, or by a key server on your own network.
Signed, checked updates
Releases are signed with a key kept offline, every part is checked before it installs, and a failed update rolls back.
Agents kept in bounds
Agent commands run in a sandbox with confined file access, and agents reach only an allow-list: Companies House, HMRC, GOV.UK, our update server and the hosts you add.
Private by default
The dashboard listens only on the unit. Office-network access is a switch, off by default, encrypted with the unit’s own certificate and behind a PIN.
Sealed records
Each unit keeps its own sealed stores, chat history is encrypted, and licence events and approvals go to a tamper-evident log.
For your engineers
Your developers can use it too.
An API on your network
Engineers point their own coding tools at the unit’s model through a standard chat API on your office network, with a key per engineer, rate limits and an audit trail. Off until you switch it on.
A coding assistant in the terminal
Type arsenale in a terminal and it works on your code on a separate branch, running its commands in a sandbox.
Storage you can undo
The Storage app shows the disk at a glance and keeps system snapshots, so a change to the system can be rolled back.