Your own AI platform. On your hardware. Even with no internet.
Serve your own models, build agents with real tools, and govern every call, all inside your Kubernetes cluster. Nothing calls home: licence, updates and models install offline.
- Air-gapped ready
- OpenAI-compatible API
- Kubernetes
| Time | Event | Result |
|---|---|---|
| 09:41:07 | chat · qwen2.5 · agent/claims-triage | allowed |
| 09:41:09 | pii.check · card_number (Luhn) | redacted |
| 09:41:12 | tool · sql.update_claim (write) | needs approval |
| 09:42:30 | approval · j.ali@ministry | approved |
| 09:44:02 | release · claims-triage v7 · evals 48/50 | blocked |
Government & defence
Networks with no outbound internet, where every update has to be carried in and checked.
Banks, insurers, health
Prompts and customer data stay on your infrastructure; external AI providers are off unless you turn them on.
Platform teams
One OpenAI-compatible endpoint for every model your organisation runs, with policy in front of it.
Capabilities
Everything an AI programme needs, run by you.
Serve your own models
Deploy vLLM, Triton, Ollama, Whisper and Piper on Kubernetes from a catalog. Upload weights offline.
One API for everything
OpenAI-compatible chat, embeddings, speech-to-text and text-to-speech, with exact and semantic response caching.
Agents, runs and traces
Versioned agents, a playground, and a trace of every step each run took.
Knowledge bases
Ingest your documents into a private vector store your agents can search.
Tools with a human check
SQL, REST, GraphQL, Salesforce and Office 365. Any tool that writes data waits for an approval.
Self-hosted voice agents
Real-time speech-to-text, model and speech in one loop, entirely on your servers.
Policy on every call
Policy rules and PII checks run before each model call, and blocked requests are logged.
Tamper-evident audit log
A hash-chained record of who did what, with one-click verification.
No release without passing evals
Test suites graded by a judge model you choose. A project can block any version that fails.
Architecture
Every request passes the same checkpoint.
Deployment
Install it once. Upgrade it offline.
Licences are signed files checked locally. Upgrades ship as signed bundles that voisctl verifies, refusing downgrades and checking every image after install.
Air-gapped
AvailableNo outbound connection at all. Images come from your own registry.
Self-hosted, connected
AvailableYour cluster, with the option to route selected calls to external providers.
Hybrid
PlannedManaged control plane, your data plane. On the roadmap.
Coming next
Visual workflow builder · Hybrid deployment · Usage metering
Choros licensing
Licensed per deployment, sized to your seats.
We scope a pilot on your hardware, then license the platform for production.