Sovereign Intelligence

When the cloud goes dark,
the Silo stays lit.

The AI Silo is a sealed vault of open-weight models on hardware you own — provably intact, license-clean, and always ready. Internet cut, API revoked, model deprecated, price spiked: your intelligence stays online.

Configure your Silo See how it works

MODELS ONLINE14

VAULT USED6.2 TB

INTEGRITY✓ OK

UNITSILO PRO

Survives internet loss Survives API outages Survives vendor policy changes Survives model deprecation Survives price shocks

The Librarian

A vault that watches itself, repairs itself, and never phones anyone but its owner.

Inside every Silo runs the Librarian — an always-on daemon that curates the right models, proves every byte is intact, pins exact versions, and guards what's legal to run. It is the brain that makes sovereignty real.

01 · Curate

The right models, ready

A curated manifest is the single source of truth — the exact open-weight models your work depends on, present and accounted for.

02 · Verify

Provably intact

Every file is streamed and checked against a pinned SHA-256. Corruption is detected and quarantined — a model is never live until every byte checks out.

03 · Update

Pinned, never silent

Exact upstream revisions are fetched and promoted atomically. Updates are proposed, never forced — nothing changes under you without a record.

04 · Guard

Legal, healthy, watched

License-class is a hard gate. Drive SMART, capacity and temperature are monitored. Every decision is written to an append-only audit log.

Atomic promotion

Nothing goes live until it's proven.

Every model that enters the vault passes the same gauntlet. There is no fast path, no unverified shortcut, no silent swap.

Fetch

Pull the pinned revision into an isolated staging area.

Verify

Stream-hash every file against its expected SHA-256.

License-gate

Evaluate license-class before anything is distributed.

Promote

Atomically move verified files into the live library.

Guard

Re-verify nightly; quarantine on any drift.

Integrity is continuous. The Librarian re-hashes the entire vault on a schedule — so "verified" means verified today, not the day it shipped.

The lineup

Three Silos. One simple choice.

Every Silo is the complete product — your own private AI, the full license-clean model library, and a year of Care included. The only question is how much power you want.

Start here

Silo

Private AI for your office

$9,900 one-time

ChatGPT-class AI that runs entirely in your building. Nothing leaves the room.

128 GB of AI memory
Full model library, pre-loaded
Plugs into a standard outlet

Choose Silo

Silo Pro

Faster. Never goes down.

$19,900 one-time

Everything in Silo, about 3× faster — and it takes over automatically if your cloud AI goes down.

Everything in Silo
Runs models 2× larger, ~3× faster
Automatic failover when your API drops

Choose Silo Pro

Full power

Silo Max

The biggest models. Zero dependency.

$39,900 one-time

Twin engines, 256 GB of AI memory. The largest open models, always on, fully air-gappable.

Everything in Silo Pro
2× engines · 256 GB pooled memory
Always-on · air-gap ready

Choose Silo Max

Silo Enterprise

Rack-scale, multi-user, air-gapped — private AI for your whole organization, designed with you. Custom-built, custom quote.

Talk to us

Why not just a mini AI PC?

A $4,000 box runs a model. A Silo guarantees your intelligence.

A DGX Spark — or any 128 GB mini-PC — is a great dev machine, and a raw component. It hands you the harder job: sourcing, verifying, licensing, updating, monitoring and failing over, yourself, forever. The Silo is the managed, audited system around the silicon.

CapabilityBare 128GB boxThe AI Silo

Runs open-weight models locally✓✓

Proves every file is intact — continuous SHA-256, auto-quarantine—✓

License-clean & audited — legal to run and distribute—✓

Signed update channel — safe to update air-gapped—✓

Automatic API-down failover—✓

Drive health, capacity & integrity monitoring—✓

Managed service & an SLA — someone to call—✓

Built for a fleet across sites—✓

A Spark runs a model. A Silo guarantees your intelligence — intact, legal, and online, forever. One is a part; one is peace of mind you can audit.

The spine of the product

Loading a model onto hardware is distributing it.

So we treat license-class as a hard gate, not a label. Every model is judged before it ever reaches a customer's vault — and every judgment is recorded, permanently.

Clean

Ships freely. MIT, Apache-2.0 and similar — staged and distributed without friction.

Restricted

Staged with attestation. Community licenses and field-of-use limits require an explicit allow flag, recorded in the audit log.

Blocked

Never staged. Non-distributable weights are refused at sync — with a written reason, every time.

Questions, answered

The things buyers ask before they trust a vault.

What happens if the internet goes down?

Nothing changes for the Silo. It's an on-premise appliance — the models, the Librarian, and the inference engine all live on hardware in your building. Silo Pro even steps in automatically the moment your cloud API goes dark, and Silo Max never depended on the internet to begin with. Updates simply wait until you're back online.

How do updates work if the Silo is offline or air-gapped?

The Librarian fetches pinned upstream revisions only when it has connectivity, and updates are always proposed, never forced — nothing changes under you without a record. For air-gapped Silo Max and Enterprise deployments, updates arrive as verified, signed bundles you import on your schedule; the same SHA-256 verification and license-gating run locally before anything is promoted.

Is this legal? How do you handle model licensing?

Loading a model onto hardware is distributing it, so we treat license-class as a hard gate. Clean licenses (MIT, Apache-2.0, and similar) ship freely. Restricted licenses (community terms, field-of-use limits) are staged only with an explicit, logged attestation. Blocked, non-distributable weights are refused at sync and never reach your vault. Every decision is written to an append-only audit log you can review.

Where does my data go? Is anything sent to the cloud?

Your prompts and inference never leave the unit. The Silo runs locally and never phones anyone but its owner. The only outbound traffic is the Librarian fetching model updates and license metadata over your update channel — and that's it. On an air-gapped Silo Max, even that is removed. There is no telemetry of your usage or content.

What's the warranty and support like?

Hardware carries a standard manufacturer warranty (term confirmed at purchase). Every Silo includes its first year of Standard Care — verified model updates, integrity monitoring, and business-hours support. Priority Care adds 4-hour response and proactive monitoring. Enterprise deployments get a fully managed plan built into the quote.

Who installs it? Do I need a specialist?

The Silo is a sealed appliance designed to power on and run. You plug it in, give it power and (optionally) a network drop, and the Librarian comes up self-verifying. For multi-unit fleets or air-gapped deployments, Priority Care and Enterprise plans include guided or hands-on setup.

Can I add my own models?

Yes. Your own open-weight models and fine-tunes can be added to the vault. They pass the same pipeline as anything else — staged, SHA-256 verified, license-gated, and promoted atomically — so your models get the same integrity guarantees and audit trail. Weights you can't legally distribute are yours to attest for under Restricted.

What happens if a drive fails?

The Librarian continuously monitors drive health (SMART), capacity, and temperature, and alerts you before a failure becomes data loss. Storage is configured for redundancy, and because every file is pinned and SHA-256-verified, a replaced drive is re-populated and re-verified against the manifest — the library heals back to a known-good state rather than guessing.

What am I actually paying for every month?

Care — and your first year is included. Care is the Librarian update channel plus support: it keeps your library curated and current (new pinned revisions, license re-evaluation), runs continuous integrity verification, and gives you someone to call. The hardware is a one-time purchase you own outright — Care keeps it sharp, safe, and supported.

What if I stop paying for Care?

You still own the hardware and keep every model in your vault — there is no remote kill switch and nothing gets locked. What you lose is the live update channel, new license evaluations, ongoing integrity-monitoring alerts, and support. The Silo keeps running; it just stops receiving new curation and help.

Can I get a refund?

Hardware is covered by a defined return window from delivery (confirmed at checkout); units must be returned in original condition. Subscriptions can be cancelled at any time and are not pro-rated for the current period. Defective hardware is handled under warranty. Full terms live on the Legal page.

How is "provably intact" different from a normal backup?

A backup tells you a file exists. The Silo tells you the file is byte-for-byte the exact model you pinned — every file streamed and checked against its expected SHA-256, on a schedule, with a live OLED readout and an append-only log. "Verified" means verified today, not the day it shipped.

Which Silo should I choose?

If you want private, ChatGPT-class AI in your building: Silo. If your business runs on a cloud AI and can't afford to go down with it: Silo Pro (most popular). If you need the largest models running around the clock, or a fully air-gapped unit: Silo Max. For your whole organization: Silo Enterprise — talk to us and we'll design it with you.

Can I manage more than one unit?

Yes. The customer portal gives you a fleet dashboard — every unit's integrity, vault usage, model list, drive health, and audit log in one place — plus shared billing, orders, and support. Managed-SLA customers can have TrueNorth operate the fleet on their behalf.

Bring your intelligence home

Own the models your business runs on.

Pick your Silo, or tell us your workload. We'll make sure your AI stays online the day everyone else's goes dark.

Configure your Silo Talk to us

When the cloud goes dark,the Silo stays lit.