“Revenue is probably down because foot traffic weakened. You should review staffing and promotions.”
- No source rows
- No formula
- No proof of cause
Sovereign · Air-Gapped · Zero-Trust
A sealed on-premise appliance that does your analysis the way an honest analyst would — it computes every number itself and proves each one with a receipt. The AI writes the words. It is never allowed to invent a figure.
No cloud. No subscription. No guessing. A $10,000 box you plug in.
Revenue gap computed from source rows, not typed by a model.
Zara_Sales_Analysis.xlsx
operationsum(revenue) by section
rows251 verified
The problem
A dashboard charts bad data without blinking. An AI assistant explains a number it invented, in flawless prose. You’re choosing between tools that are faithful to your errors and tools that are fluent in their own — and acting on both.
Ricerca is neither.
The trust gap
“Revenue is probably down because foot traffic weakened. You should review staffing and promotions.”
“Revenue in the MAN section is higher than WOMAN by 14.23%. Source: Zara file. Formula: segment revenue gap. Rows: 251.”
What it actually buys you
Correct numbers are the floor. The value is the decision reaching the right person while it still matters — before a small drift becomes an expensive surprise. The same sealed box does this inside a classified facility and in a dentist’s back office.
Supplier data that legally can’t touch a cloud. By hand, every delivery looked on time. A watcher saw a subcontractor’s lead time lengthening each cycle and flagged it in time to re-source quietly — instead of filing a schedule slip. It works because the box is air-gapped: the analysis comes to the data.
Resident records and payroll that must stay on-premise. Overtime was creeping across three departments; no single line looked alarming. The morning brief named the pattern before it crossed the quarter’s budget — and not one record ever left county control.
Reimbursements on one procedure code had drifted down for a month. The owner-dentist would have found it at tax time, if at all. The watcher caught it in week three — thousands in recovered revenue — and no patient record ever touched the internet.
Food cost from one distributor crept up half a point a week — invisible on any single invoice, fatal over a quarter. The brief flagged the slope; the operator renegotiated before the margin was gone.
From a secure facility to a strip mall, the same promise: a sealed analyst that never sleeps, never leaks, and tells you what to do before it’s a problem. The proof below is how you know you can act on it without second-guessing.
Why it’s different
The moment software can type a number, it can lie about it. So in Ricerca the part that writes the words is never handed a number — only a key to one a calculator already computed. A deterministic compiler then strips anything ungrounded before it reaches you.
An LLM tool cannot show you the receipt for a figure it imagined. Ricerca always can — source file, formula, exact rows, on demand.
How it works
Cleans your data (raw always preserved), fingerprints the shape of every finding, and computes each figure as a cell — a value plus its proof. The writer gets keys, never values, so it can’t fabricate.
Reads documents for color only — names, themes, positioning — with every number redacted. Even scanned, image-only PDFs are read by a local vision model, never for figures.
They meet once, at the writer: documents add color, the calculator owns the numbers. A vendor’s slide can never become a reported statistic.
See it in action
Ask in plain English. Get back grounded answers where every number carries a receipt — and charts chosen by the shape of the finding, never a template.




Zero-trust infrastructure
Ricerca ships as a sealed, dedicated appliance — its own trust domain. A compromise of your network never reaches its models, its receipts, or its reports. And it never reaches into your systems. Built for the environments where that line is non-negotiable: government, defense, finance, healthcare.
A scheduled hardware air-gap switch connects the network only during a brief nightly window. The rest of the day the Ethernet is literally cut. No always-on path to attack.
Approved file types into a dedicated folder. The appliance only reads designated files — it cannot write to, scan, or control your environment.
All compute, language, and vision run locally on the box. Nothing leaves it. The box never leaves the building.
We own the hardware and the image — one controlled, reproducible, supportable unit. Not “works on my machine” across a thousand setups.
Proof, not adjectives
From a single end-to-end run on a real retail dataset — observed at every step.
A night with Ricerca
At 2 AM the air-gap opens for minutes; the appliance pulls the day’s files, then goes dark. While the building sleeps it cleans, computes, charts, and checks the data’s integrity — catching a column gone blank or two metrics that stopped moving together.
By the time you unlock the door, a grounded brief is waiting: what moved, what’s anomalous, what’s at risk. Every number with a receipt. Every guess labeled as one. You didn’t ask. It was already done.
Pricing
The hardware is bundled on purpose — it’s what delivers the isolation, the offline guarantee, and the no-install support model.
Request a briefing
Government, defense, and enterprise inquiries welcome. We respond personally.