Air-gapped AI systems · law · medicine · the professions of confidence
Muniment builds sealed, air-gapped AI machines that live inside your practice — drafting, transcribing, and searching decades of your own files — with no cloud, no account, and no third party. Nothing goes out. Not to us. Not to anyone.
No cloud · No account · No telemetry · No exceptions
Recitals
Whereas, your clients and patients tell you things they tell no one else;
Whereas, every cloud AI service is, in law and in fact, a third party;
Whereas, a confidence shared with a third party is a confidence at risk;
Whereas, the most secure network connection is the one that does not exist;
Now, therefore, we build machines worthy of the things you keep.
Article I
The muniment room was the one room in the castle built never to burn — a windowless, stone-vaulted chamber where the deeds, charters, and titles were kept. Not because parchment was precious. Because proof was. Your proof now lives in case files, charts, and correspondence — and lately, in the questions your staff type into chatbots. We build the muniment room for the age of intelligence.
Attorney–client privilege protects what stays between you. The ABA’s Formal Opinion 512 (2024) warns lawyers in plain terms: placing client confidences into self-learning cloud tools puts the confidence itself at risk. The cleanest answer to “who else can see this?” has always been “no one.”
The average healthcare data breach now runs ≈ $9.8 million (IBM, 2024) — before the OCR investigation, the patient letters, and the headline. PHI that never leaves your suite can never appear on the HHS breach portal. You cannot lose what you never sent.
A Muniment has no route to the internet. Not a locked door — no door. No Wi-Fi chip was ever soldered; no outbound cable was ever run. Your files cannot leak through a wire that does not exist.
Sources: ABA Formal Op. 512 (2024) · IBM Cost of a Data Breach Report 2024 · HHS OCR breach portal. Muniment provides engineering, not legal advice — bring your compliance counsel; they’ll enjoy this conversation.
Article II
A Muniment is a purpose-built computer — professional GPUs in a hand-finished walnut-and-steel cabinet, quiet enough for a reading room — running today’s best open-weight AI models entirely inside your walls. It arrives with your archive indexed and your letterhead learned. You ask; it answers in seconds, citing your own files by name. And when the internet goes down, nothing happens.
Posture A — how most practices run
The Muniment answers on your office network, and holds no route to the world. Staff reach it from the desks they already sit at; the machine itself can reach nothing beyond your walls. Convenience intact, egress impossible.
Posture B — for the most careful
No network at all. The machine touches nothing; you visit it, the way you visit the records room. Chosen by trial teams in the war-room month, research groups under embargo, and the professionally unpersuadable.
Asked of real machines, in rooms like yours:
Law
“Summarize this 400-page deposition and flag every admission about the maintenance schedule.”
“Find every matter where we argued equitable tolling — and how it went.”
“First draft of a motion to compel, in our house style.”
Medicine
“Transcribe this visit and draft the SOAP note for my sign-off.”
“Summarize Mrs. A.’s last five encounters for the referral letter.”
“Draft the prior-authorization appeal, citing the chart.”
Advisory
“Pull every engagement letter that caps our fees, and list the caps.”
“Summarize five years of this client’s returns for the planning meeting.”
“Draft the treatment summary without naming third parties.”
Every answer cites the file it came from. Every file stays where it has always been: with you.
Article III
Three sizes, named the way books are. Schedule A follows each.
For the private office
A desk-side tower for the solo practitioner and the small partnership. Sits beside the filing cabinet; sounds like nothing at all.
from $12,900 · solo build from $9,800
| Seats | 1–8 people |
|---|---|
| Model class | up to 70B-class open-weight |
| Archive | 8 TB encrypted — ≈ 25 years of matter files |
| Acoustics | ≤ 35 dBA — quieter than your HVAC |
| Power | a standard wall outlet |
| Form | desk-side tower, 18 in. |
For the practice
The workhorse. A half-height cabinet that serves the whole office — drafting, archive search, and dictation, all at once, all day.
from $38,000
| Seats | up to 40 people |
|---|---|
| Model class | 120B-class · Nightingale-ready |
| Archive | 24 TB encrypted |
| Acoustics | 42 dBA — closet-rated |
| Power | one dedicated 20 A circuit |
| Form | half-height cabinet |
For the firm
A matched pair with automatic failover, for firms where the machine going quiet at 2 p.m. is simply not a thing that may happen.
from $95,000
| Seats | 40–200 people |
|---|---|
| Model class | frontier open-weight, 200B+ MoE |
| Archive | 60 TB+, mirrored |
| Resilience | matched pair · automatic failover |
| Power | two dedicated 20 A circuits |
| Form | rack room / large closet |
Room- and headset-grade transcription for clinics, depositions, and rounds — running locally, like everything else. + $3,900–7,500
More shelf. Encrypted storage in 8 TB increments for the practice that has never thrown a file away. + $1,200 per 8 TB
Quarterly model updates by courier, loaner-chassis guarantee, annual re-tune. from $390/mo — Article V, below.
Planning figures for budgeting, current as of mid-2026. Hardware markets move; written quotes hold for 30 days. Every quote ships with its full bill of materials — you will know exactly what you own, down to the last screw.
Article IV
From intake to install in six to eight weeks. You will never be asked to trust us with a file.
It begins the way every good engagement begins. Ten minutes, on the intake page or on paper. We reply within two business days with a configuration and a fixed quote.
Assembled and burned in at our workshop for two weeks — thermals, acoustics, and a few thousand questions it must answer correctly before it may wear the numbered plate. Models are curated to your profession and tested against your kind of work.
Chassis seams receive numbered tamper-evident seals; disks are encrypted with keys that will only ever exist in your building. Medieval muniment chests bore three locks, and opened only with all three key-holders present. Yours bears the modern equivalents — and, because some traditions deserve to survive, one drop of actual wax.
Delivered by hand, in a road case, not cardboard. Four hours: placement, the indexing of your archive — which runs on your machine, in your building, and never crosses our hands — and training for your staff. We leave behind a one-page runbook, and no login of our own.
Models improve every quarter, and yours should too. Updates arrive the way law books have always been updated — a pocket part, delivered by hand on sealed, numbered media and applied in an afternoon. Your machine gets smarter for years without once touching a network.
Article V
Both of your professions run on standing orders. So do we.
Optional — a Muniment runs happily without it. Founding-cohort practices lock lifetime Courier pricing.
Venue
— and any practice whose files are nobody else’s business.
Questions presented
The honest answer: at the far frontier, the largest cloud models are still ahead. For the daily work of a practice — drafting, summarizing, transcription, and asking questions of your own archive — today’s open-weight models are more than equal to the work, and yours improves every quarter via the Courier. You trade the last few percent of fireworks for absolute certainty about where your files live. Our clients consider that the best trade in the building.
The way law books have always been updated. Each quarter, new models and software arrive by courier on sealed, serial-numbered media, are verified against printed checksums, and are applied in an afternoon. We call each delivery a pocket part, and we will not apologize for it.
No — and not as a promise, as a mechanism. Indexing runs on your machine, inside your building, during install day. We keep no login, no remote access, and there is no telemetry to receive. When hardware is serviced, your disks stay in your custody; we swap the steel around them.
Compliance is a property of your practice — no vendor can sell it in a box, and you should squint at any who claims to. What a Muniment does is remove the hard question: the third party. No BAA chain, no data-processing addendum, no subprocessor list, because no data is processed anywhere but your own premises. We provide full technical documentation; bring your compliance counsel. It tends to be the shortest meeting of their year.
Under Standing Care, a matched loaner chassis arrives within 48 hours and your encrypted disks — which never leave your office — move into it. Without Standing Care, we repair on a bench-fee basis, same custody rules. Either way, no file of yours rides in anyone’s van.
No. The runbook is one page: how to turn it on, how to turn it off, whom to call. If your office can run an espresso machine, it can run a Muniment. Where in-house or consulting IT exists, we hand them the full documentation and they are usually delighted at how little there is to do.
Of course. Many clients keep both, and the office rule becomes wonderfully simple: if it has a client’s name in it, it goes to the Muniment.
You climb the shelf: Octavo to Quarto to Folio, with your purchase price credited on a published schedule. Your archive and its index move with you — across the room, not across the internet.
Professional-grade GPUs (48 to 192 GB of VRAM depending on the size), ECC memory, encrypted NVMe storage, redundant power on the Folio — and not one radio. The full bill of materials ships with every quote; you will know what you own down to the last screw.
Declaration
Before Muniment sold sovereign machines, its founder built his own — and runs it under datacenter discipline. Practitioner first; vendor second.
Before Muniment had a name, its founder built the prototype for himself. Aditya runs a local AI server in his own home — his own GPU, open-weight models, his own files indexed and answering questions — inside a small self-hosted estate kept with datacenter discipline: every host watched by a SIEM, storage encrypted, backups automated, monitored, and offsite. Muniment is that conviction, hardened into a sealed product.
One distinction, offered before you ask: the lab is self-hosted and private, but it is not air-gapped — its owner reaches it over an encrypted mesh from wherever he happens to be. The full vow of silence is reserved for Muniment machines. We are exact about this because exactness is what you are buying.
12 GB
local AI GPU — his own
0
API calls to run his AI
6
nodes under management
~5 TB
owned, RAID-protected
“I didn’t learn on-prem AI from a whitepaper. I run it — on my own GPUs, in my own house, watched by my own SIEM.”
— Aditya, founder
Signature page
We are onboarding ten founding practices through 2026. Founding terms carry lifetime Courier pricing, first position on the build calendar, and a standing invitation to tell us what the machine should learn next. The next line on the ledger could read:
Intake takes about three minutes. We reply within two business days.