The commitment

Four lines we will not cross.

Negative promises are harder to walk back than positive ones. Start here.

We will not train models on your data.

We will not sync your knowledge base upstream.

We will not keep copies of your data on our infrastructure.

We will not require internet to run.

The proof

Here is what a record of AI work looks like.
Signed, hashed, and yours.

A sample record in the six-part format Core seals to Capsule. Any auditor can verify a real one offline, in Python, TypeScript, Rust, or Go.

capsule://ba924168-ac3c-4365-a8c4-e6bd7c7e41d0sample · sealed
Decision summary
Review the Q2 vendor audit report and draft a summary for legal.
Trigger
type
user_request
actor
compliance-reviewer@bank.example
intent
Review the Q2 vendor audit report
Context
vault_ref
vault://contracts/vendor-audit-2026q2.pdf
model
local
policy
contract_review_v3
Reasoning
analysis
Three passages cited from the source file.
confidence
0.87
Authority
policy
contract_review_v3
approval
human:records-officer@bank.example
Execution
tools
vault.read, draft.write, human.approve
duration
98,052 ms
Outcome
status
success
artifact
vault://drafts/vendor-audit-summary.md
signed: ed25519
hash chain: sha3-256
verify.sh
$ pip install qp-capsule
$ capsule verify --pubkey ce3b8d53dad2c3fa5c72e6aa18d7f7a59ca9fc720ea8bcd33902fb29ca7c7260 sample-chain.json
Capsule Chain Verification
Level: signatures (full + Ed25519 verification)
✓ Capsule #0 (genesis) 70eed0cc4f9b...
✓ Capsule #1 (seq 1) 9037cd246007...
✓ Capsule #2 (seq 2) 627a6010ef27...
PASS -- 3 capsules verified
Runs offline. No network required.
Verify in Python, TypeScript, Rust, or Go.
Change one value in a record and verification fails.
Where we fit

Everyone else stops short of the whole stack.

Their side of the firewall
API providers

Your prompts live on their servers.

Cloud platforms

Your data routes through their data centers.

Self-hosted runtimes

Inside your firewall, but only the model. The rest of the stack is left to you.

Your side of the firewall
Quantum Pipes

The whole stack.

Runs on your hardware. Signs with your key. Leaves nothing behind.

The platform

Six components.
One sovereign platform.

Each component does one thing and does it well. Run the whole stack, or adopt only what you need. Open-source foundation, private intelligence layer on top.

Keep going

See how the six compose into a living system.

Every request flows through the same anatomy: Hub orchestrates, Core decides, Vault grounds, Conduit routes, Tunnel secures, Capsule seals. The platform page walks through each layer, the operation stream between them, and the license posture per component.

Built for

Teams whose data cannot leave the building.

Defense

Federal contractors handling CUI

Healthcare

HIPAA-covered health systems

Finance

OCC-regulated financial institutions

Regulated

Any team whose data cannot leave the building

No cloud contract. No vendor lock. Zero egress by default.

Email an engineer who owns the code. You get an answer from a person, not a brochure.

Apache 2.0 coreAir-gap capablePost-quantum signaturesZero egress by default