01100% On-Premise & Contained Legal AI Appliance

Vault AI: TokenGrill Sovereign Box

A purpose-built, 100% on-premise & contained AI appliance that runs entirely on your infrastructure. No cloud. No internet. No external connections. Ever.

Locked downLocked inBuilt for law

100% of queries resolved locally

No data ever leaves your environment. No external connection at all.

Built-in AI engine

Preloaded with leading open-weight models (Llama 3 / Mistral) optimized for legal use cases.

100% On-Premise & Contained by design

Physically and logically isolated. No Wi-Fi. No Bluetooth. No outbound access.

Matter-level segregation on-box

Each matter is indexed in its own scoped workspace with role-based access tiers.

Dedicated LiteLLM gateway

Private API layer for internal tools and enterprise integrations — kept entirely inside.

Your data. Your model. Your control.
  • No cloud. No internet. No external connections.
  • Complete data sovereignty.
  • Built for confidentiality, compliance & control.
Deployment

Ships as a hardened physical node or a virtual appliance (Docker / AWS VPC / Azure Private Cloud) inside your perimeter — with an optional dedicated hardware node on request.

Schedule Security Review
Two modes. One mission: total data sovereignty.

Offline mode

Point-to-point. No network. No problem.

Perfect for client meetings, travel, or coffee shop demos. Connect directly from your laptop, phone, or tablet — no LAN, no Wi-Fi, no internet. Plug in an external SSD to upload matter documents right at the box.

01Your laptop, phone, or tablet (browser)
02Direct connection (USB-C / Ethernet / SSD)
03Vault AI (TokenGrill Sovereign Box)
Completely isolated. Runs entirely on the box. Documents load from your device or an external SSD — nothing ever touches the network.

Office mode

Share securely. Stay completely isolated.

Connect the box to your local Wi-Fi or LAN so your team can access it from their desks, laptops, or phones — without ever touching the internet. Upload documents directly from any device or an attached SSD.

01Your team (laptops, phones, tablets on local Wi-Fi)
02Local Wi-Fi / LAN (firewall optional)
03Vault AI — no internet, no external connections
Accessible to your team on the local network from any device. Still firewalled off from the wider internet.
Complete sovereignty
You own it.
You run it.
You control it.
Zero visibility
No logs leave.
No data leaks.
No surprises.
No cloud. No internet.
No risk.
No dependencies.
No exposure.
Built for legal
Confidentiality.
Compliance.
Professional responsibility.
Enterprise grade
Hardened.
Auditable.
Reliable.
05Uncompromising privacy & compliance

Three privacy pillars for General Counsel

Privilege is not a feature flag — it's enforced by hardware placement. The appliance sits in your office, so confidential client information never becomes someone else's training data. Nothing is sent anywhere, because there is nowhere for it to go.

Runs in your officeImmutable local logsMatter-level segregation

100% On-Premise & Contained Execution

Every prompt, document, and answer is processed by the Vault AI appliance inside your own office. There is no outbound connection and no vendor endpoint — work exists in appliance memory for the duration of the request and is discarded when it completes.

100% local100% On-Premise & Contained0 bytes egress

Matter-Level Segregation

Each matter runs in its own scoped workspace on the appliance. Documents, embeddings, and answers are indexed per matter with role-based access tiers, so a paralegal on one file cannot reach another team's work product. Working memory is cleared when the run completes.

Per-matter scopingRole-based accessMemory cleared

Deterministic Privilege Audit Logs

Immutable, step-by-step logs stored on the appliance record which local model performed each part of a legal analysis, with timestamps and hashes — ready to hand to a risk committee, auditor, or opposing counsel's challenge.

ImmutablePer-step attributionExportable