+ vostro [ital.] — yours

Intelligence,
contained.

VOTRO deploys frontier open-weight language models on infrastructure you own or control. Nothing leaves. The model is yours — weights, context, keys, costs.

$ votro init --site your-lan --mode air-gap

→ weights: glm-4.6 · verified sha256 ✓

→ egress: 0 bytes · retention: 0 days

→ tenancy: single · root: yours

→ status: CONTAINED

$

0
bytes egress
0
days retention
1
tenant — you
100%
weights owned

+ Statement of purpose

Public AI asks you to trust someone else’s cloud with your most sensitive work. We think that trust is misplaced — not because clouds are careless, but because it should never be required. VOTRO installs the model itself on hardware you control, turning confidentiality from a policy into a physical property of your infrastructure.

Contracts can be breached, certifications can lapse, interfaces can change. Physics cannot be argued with. What is yours stays yours.

+ Built for

  • Law firms
  • Legal tech
  • Financial services
  • Healthcare & pharma
  • Insurance
  • Government
  • Consulting
  • Defence & aerospace

+ 01 — Products

Two containments.

VAULT™

On-premise

GA

Frontier models installed inside your own data centre or office. Nothing crosses your firewall — not prompts, not weights, not logs.

DeploymentYour hardware, your perimeter
Data residencyInside your walls
AccessAir-gap capable
Go-live4–6 weeks
EngagementOne-time setup + monthly SLA
Spec sheet

ENCLAVE™

Dedicated hosted

PILOT

Dedicated GPU infrastructure locked to your keys, region of your choice. We retain and manage the hardware — one monthly fee covers lease, licences and operation. You keep root.

DeploymentSingle-tenant dedicated GPUs
Data residencyRegion of your choice
AccessFull root, no shared tenancy
Go-live2–4 weeks
EngagementAll-in monthly fee, no capex
Spec sheet

+ 02 — Model catalogue

Open weights.

MODELROLESIZE / CONTEXTNOTES
GLMFLAGSHIPFlagship355B MoE · 200K context · MITDefault frontier deployment. Leads open-weight agentic benchmarks — tool use, long-horizon coding, document analysis.
DeepSeekReasoning671B MoE · 128K context · MITFrontier-grade reasoning and mathematics at a fraction of frontier cost.
QwenGeneralist0.6B–235B · 128K context · Apache 2.0A model for every slot, from edge-scale to frontier MoE, with strong multilingual coverage.
MistralFast24B dense · 128K context · Apache 2.0Dense, efficient, dependable. Serious utility on a single node.

Your perimeter is the boundary. Full stop.

  • Inference runs entirely inside your infrastructure
  • Zero retention by design — no prompts, no outputs, no telemetry
  • Air-gap capable, with signed offline update bundles
  • Encryption at rest and in transit — keys held by you
  • Audit logs stay on your side, exportable to your SIEM
  • Aligned with GDPR, data-residency and privilege requirements

+ 03 — Process

Weeks, not quarters.

01

Assess

We map your workflows, data sensitivity and hardware, then select models, sizes and guardrails — starting with a fixed-fee pilot.

02

Deploy

Our engineers install, tune and integrate the stack behind your existing access controls. Typical go-live: two to six weeks.

03

Operate

Monitoring, updates and optimisation for as long as you run it — with full documentation and handover the day you ask for it.

+ 04 — FAQ

Answers.

01Which models can we run?+

The best open-weight models available — GLM, DeepSeek, Qwen, Mistral — selected against your accuracy, latency and budget targets. You can run several side by side and swap as the frontier moves. You are never locked to one vendor's model.

02Can anyone at VOTRO see our data?+

No. Inference happens inside your perimeter, so prompts, documents and model responses never reach us. Where our engineers touch hardware at all, it is with your approval, under your supervision — and they still see none of your data.

03What hardware do we need?+

A single multi-GPU server can serve a department; larger organisations run multi-node clusters. If you don't own hardware, we rent dedicated single-tenant GPUs in your name and your chosen region.

04Can it run air-gapped?+

Yes. Fully offline deployments — including model and software updates delivered as signed offline bundles — are available for regulated and classified environments.

05How is this different from ChatGPT Enterprise or Copilot?+

Those run on vendor clouds and rely on contracts and certifications. We move the model itself onto hardware you control, so confidentiality is a physical property of your infrastructure — and your costs are fixed, not metered per token.

06What does it cost?+

ENCLAVE™ is one predictable monthly fee — typically $15k–40k depending on GPU capacity — covering the hardware lease, software licences and continuous management. No capex. VAULT™, on your own hardware, is a one-time setup and development fee (typically $250k–500k) followed by a $10k/month SLA covering maintenance, security patching and model upgrades as better open weights ship. Pilots are fixed-fee and credited against deployment.

07How long does a deployment take?+

A pilot typically goes live in two to six weeks: roughly one week to assess, one to three to deploy, and a parallel rollout with your team. Handover documentation is delivered from day one.

Deploy what’s yours.

If your data can’t leave the building, your AI shouldn’t either. One call, fixed-fee pilot, handover from day one.