Field notes
Private, on-premise and sovereign AI
Private AI is defined by control you can prove: who can access the system, where data moves, what gets retained, and how copies are deleted. Running a model on your own hardware answers only the hosting question.
These notes separate residency, jurisdiction, administration, and supply independence, then connect each constraint to an architecture and a test.
Reading
Guides in this collection.
What makes an LLM private?Privacy is established by evidence about access, retention, training use, egress, logs, keys, and deletion, not by a hosting label.8 min readRead
Local LLMs are not automatically HIPAA compliantRunning a model on your own hardware satisfies none of the Security Rule by itself. The obligations attach to access control, audit logging, integrity, transmission security and the agreements covering anyone who touches the data, and self-hosting changes where those controls live rather than whether you need them.11 min readRead
How much hardware does your on-premise LLM need?Size hardware from in-flight model requests, context length and response deadlines. Test both memory capacity and serving latency before pricing the configuration.11 min readRead
Does our data have to leave the building?No, but keeping it in-house costs hardware, power and a person, and in-house is a claim to be proved, not a label to be accepted.4 min readRead
How to prepare company documents for AI searchChoose authoritative sources, assign owners and test permissions and updates before expanding internal AI search.6 min readRead
How to preserve RAG access controls end to endEnforce access rules across indexes, embeddings, caches, logs and evaluation data. Test permission changes at every retained copy, not only the user-facing query.9 min readRead
Related systems
What we build here
SLMs & local modelsRun AI on company servers or devices. We select, adapt and deploy models for your tasks, with privacy controls and speed and operating cost tested at your expected volume.Explore
Company knowledgeFind a policy, recover a project decision or ask about an internal record. Search connected documents, messages and tools in one place, with source references and your existing access permissions.Explore
Working on this
Putting this into practice with your team?
Send your name and work email. We will come back with what we would check first and whether it is worth building at all.
or email us directly athello@calquity.com