Zaon Clarity Appliance · in development

Your knowledge never leaves the building.

All of Zaon™ — verified knowledge, Truth Curation™, and Clarity Secure enforcement — sealed into one machine you rack in your own facility. Every token runs on processors you own.

Nothing leaves your network No cost per token Air-gap capable Racks in 6U

In development, with design partners. Talk to us now to shape the configuration and reserve a place in the first build.

The blocker

Your legal team already answered this. The answer was no.

The material that would make your AI worth trusting

Contract terms. Case files. Design drawings. Patient records. Cleared programme documentation.

What your obligations say about sending it to a hosted model

Not permitted.

  • Residency — content stays in a named jurisdiction
  • Classification — accredited systems only
  • Contract — no processing by subprocessors
  • Sector rules — no provider off the approved list

So the knowledge that matters most is the knowledge
your AI is never allowed to see.

An appliance doesn't argue with the obligation. It removes the transfer. Nothing leaves, so nothing needs approving.

What's in the box

Not a model in a box. The whole platform.

Your verified knowledge, resident

The knowledge graph, the verified corpus and the vector index all live on the appliance. Truth Curation™ runs in place — every fact carries a verifier and a date, and nothing is exported to be processed.

A frontier model, on your hardware

Four accelerators run the reasoning model, a dedicated guard model for message checks, and the embedding stack. Inference is unmetered, because the hardware is yours.

Enforcement in the send path

Clarity Secure runs on the appliance as a real mail gateway — messages checked before delivery, not reported after. The model doing the checking sits in the same chassis. How it works.

Configurations

Four sizes. One number decides which you need.

Accelerator memory. It sets which model runs, how much verified knowledge stays resident, and how many people the appliance serves.

Clarity Appliance C1

One department

Request a quoteCapital purchase plus annual platform & support

  • Up to 300 people
  • Up to 5,000 messages/day checked
  • Up to 200 GB verified knowledge
  • 192 GB accelerator memory
  • 4U · 2.4 kW

Clarity Appliance C8

Sovereign and accredited programmes

Request a quoteCapital purchase plus annual platform & support

  • Up to 3,000 people
  • Up to 45,000 messages/day checked
  • Up to 750 GB verified knowledge
  • 1,128 GB accelerator memory
  • 10U · 7.4 kW

Capacity is confirmed against your own material before you order — we would rather size it than guess. Quotes cover the appliance, installation and the first year of platform and support.

Choosing

Buy accelerator memory. Everything else follows.

You are Take Why
One regulated team, proving the case C1 Full capability. Departmental ceiling.
A business unit standardising on it C4 The volume tier — a thousand people, checking on for all of them.
You want the best reasoning in one box C4-XL 76% more accelerator memory. Same 6U, same power, much larger model.
Sovereign or accredited programme C8 Holds the largest open-weight models outright.
Enforcement must survive a fault Two One appliance is one power domain. Continuous means a second unit.

The economics

Adoption stops being a cost risk.

metered inference $0 per token

The appliance is capital you own, on a support contract you renew. Usage does not change the invoice.

Metering quietly punishes the behaviour you want: checking every message, verifying every claim, re-reading the thread before answering. Make those free and the safety controls get switched on — and left on.

Rented accelerators of the same class cost six figures a year in compute alone, before a single token is charged. An appliance overtakes that, then keeps going.

Getting it running

Five steps. The first one is yours.

  1. Site survey. Rack space, two 208–240 V feeds, cooling, network. You get the checklist before you order, not after.
  2. Delivery. It arrives configured, sealed and keyed to you. Disks are encrypted before they leave — a stolen appliance is inert.
  3. First boot. Guided setup binds it to your identity provider and generates your keys inside the unit. It installs no credentials for our systems, because it never calls them.
  4. Knowledge ingest. Your material is indexed and embedded on the appliance's own accelerators. Nothing is uploaded anywhere.
  5. Enforcement on. Checking starts in report-only mode against real traffic. You pick the day it starts refusing.

Disconnected operation

No route to the internet. No loss of function.

Bring us your constraint, not your use case.

Name the rule that stops you sending your material to a hosted model — the jurisdiction, the classification, the clause. We will size an appliance against it and price it before you commit to anything.