Frontier‑class AI. On your desk. Off the internet.
A Mac Studio delivered ready to work. Open-weight models, Cairn, our workspace for chat and search across your own files, and nothing to install. No cloud account. No data transfer.
Your documents.
Contracts, ledgers, KYC files, correspondence. Indexed on the desk, searchable in seconds.
Your desk.
Mac Studio M5 Ultra: 36‑core CPU, 80‑core GPU, 256 GB, models loaded. Near silent, one power socket, no server room.
Nothing leaves the room.
Unplug the cable. Everything still works.
ConnectedEnough memory to run frontier-class open models. Small enough to sit beside your monitor.
Everything a private AI needs. Installed at your office, working the same day.
Model updates installed on site by us. As better open-weight models are released, your desk gets them. On Managed.
Works with the tools you already use.
Reads by default: the desk pulls copies in on a schedule you set. Writing back, a draft saved to Drive, a reply sent from your mailbox, is a per-connector switch you turn on. No connector reaches anything you have not named.
Built for the rules you already live under.
Most AI compliance work is about where data goes and who touches it. Here, it goes nowhere and nobody does. That removes most of the questionnaire before it starts.
Newer models, without opening a door.
The desk never accepts a connection. It asks, verifies, stages, and waits for your click.
Pull-only. Signed. Approved by you.
You choose how it asks:
The desk checks when you ask it to. It sends its id and version numbers, nothing else, and installs only after you approve.
- Outbound only. One allow-listed host, one non-admin updater process. Everything else is firewalled.
- Verified. Offline signing key, manifest expires in 7 days, no downgrades. Built on TUF.
- Staged. New version installs beside the old one and passes a health check first.
- Approved by you. One click in Cairn, logged. Rollback stays one click away.
Four weeks from order. Installed where the files are.
Every desk is built, hardened and tested in Zurich before it ships. Where we install it depends on where you are.
Lead time
From confirmed order to a working desk. 512 GB configurations from November. Reservation holds your slot; the clock starts when the hardware is allocated.
We come to you
Delivered and installed by our team, first indexing done with you in the room.
Shipped pre-configured
Tamper-evident seal, encrypted at rest, keys handed over on a call. One-hour remote onboarding. Duties and import quoted per destination.
Two ways to buy. No per-seat licences.
Buy it once and run it yourself, or pay a yearly fee and we keep it current.
Own it
Mac Studio 256 GB, accessories, models, Cairn, installation. Nothing further to pay.
- Everything under "What comes with it"
- On-site installation, first indexing, team onboarding
- 90 days of support after installation
- No model or security updates after 90 days. Updates can be bought per visit.
Managed
Plus hardware and accessories at cost, approx. CHF 11,000 for 256 GB / 2 TB, invoiced at Apple's price with no markup. Yours to keep.
- Everything in Own it
- Quarterly model refresh: newer models as they are released
- Monthly security updates, signed and approved by you
- Named support contact in Zurich, next-business-day
- Hardware replacement and restore from your backup
- 12-month term. Stop paying and the desk keeps working as it is.
| Own it | Managed | |
|---|---|---|
| Mac Studio M5 Ultra (36‑core CPU, 80‑core GPU, 256 GB), accessories | Included | At cost, no markup |
| Cairn, models, on-site installation, onboarding | Included | Included |
| Newer models installed | Per visit, on request | Every quarter |
| Security updates | 90 days | Monthly, ongoing |
| Support | 90 days | Named contact, next business day |
| Hardware replacement and restore | — | Included |
| Commitment | None | 12 months, then yearly |
| Year 1 | CHF 19,900 | CHF 9,900 + hardware |
| Years 2 and 3, each | CHF 0 (updates per visit) | CHF 9,900 |
Three questions.
You want newer models as they land; buying them per visit costs about the same and arrives later. Managed also covers replacement hardware and restore.
Questions we get asked.
Is it as capable as ChatGPT or Claude?
For questions about your own documents, yes: the answer comes from your files with the page cited. For open-ended writing and reasoning, cloud frontier models remain stronger. If you want both, we can add an opt-in route to a Swiss-hosted model, off by default and marked per request.
How many people can use one desk?
Up to 10 accounts. Two to five people working at the same time is comfortable. Larger teams take a second desk or a rack deployment from our Sovereign AI line.
Can you see our data?
No. The desk never sends anything to us. Support sessions are remote-assisted only when you open one, and end when you close it. Updates are signed packages you approve.
Are we still the controller? What stays with us?
Yes. The desk removes the transfer, processor and training questions; it does not change that your firm is the controller. You still decide purpose and legal basis, keep a record of processing activities, manage access rights and retention, and run a DPIA where one is required (GDPR Art. 4(7), 5(2), 28, 30, 32, 35, 44; Swiss FADP Art. 7, 9, 12, 16, 22). The dossier delivered with every desk contains a data-flow diagram, model cards, a pre-filled DPIA template and an access policy, so those records exist on day one.
How does the EU AI Act apply to us?
You are a deployer of a general-purpose AI system, not a provider: provider obligations sit with the model publishers (Regulation (EU) 2024/1689 Art. 3, 53; open-weight relief in Art. 53(2)). Your duties are AI literacy for the people using it (Art. 4, applicable since 2 February 2025) and transparency where AI output is shown to third parties (Art. 50); Cairn's labelling and the onboarding cover both. No high-risk use is shipped. If you build one, Annex III and Art. 26 apply and we will say so.
Is your Managed service an outsourcing under FINMA rules?
Operating the desk yourself is not an outsourcing. Our Managed maintenance is limited to signed updates you approve and support sessions you open; whether that counts as an outsourcing of a significant function in your case is your assessment under FINMA Circular 2018/3 "Outsourcing" (definition at margin nos. 2–4). Professional and banking secrecy (Swiss Criminal Code Art. 321, Banking Act Art. 47) are unaffected because no third party sees the data. This is a description of how the product is designed, not legal advice; it does not replace an assessment by your DPO or counsel.
How do updates and support work without remote access?
Updates are pull-only: the desk asks our update server (or reads a signed bundle from a disk), verifies the signature, stages the new version and waits for your approval in Cairn. Nothing connects inbound. For support you open a 60-minute session from Cairn, watch it on screen, and it closes itself; there is no standing access in between.
Where do you deliver?
On-site installation in Switzerland, Liechtenstein, Austria, Germany, Luxembourg and Monaco. Elsewhere in the EU, the UK, Dubai, Singapore and Hong Kong the desk ships sealed and pre-configured with remote onboarding. Other locations on request.
Why a Mac Studio?
It is the only quiet, desk-sized machine with enough unified memory to run 70B-class models well. No server room, no fans you can hear, a standard power socket.
Demand is ahead of supply. Pre‑order your desk.
Current lead time is 4 weeks from order. A CHF 500 reservation holds the next available slot for you and is deducted in full from your setup fee. Refundable until your installation date is confirmed.