Sovereign  ·  Air-Gapped  ·  Zero-Trust

The data scientist
you plug in.

A sealed on-premise appliance that does your analysis the way an honest analyst would — it computes every number itself and proves each one with a receipt. The AI writes the words. It is never allowed to invent a figure.

No cloud. No subscription. No guessing.  A $10,000 box you plug in.

Upright Ricerca appliance enclosure beside a verified morning brief
GROUNDED
14.23%

Revenue gap computed from source rows, not typed by a model.

sourceZara_Sales_Analysis.xlsx operationsum(revenue) by section rows251 verified

The most expensive number in your business is the wrong one.

A dashboard charts bad data without blinking. An AI assistant explains a number it invented, in flawless prose. You’re choosing between tools that are faithful to your errors and tools that are fluent in their own — and acting on both.

Ricerca is neither.

Same question. Different risk.

Generic AI answer

“Revenue is probably down because foot traffic weakened. You should review staffing and promotions.”

  • No source rows
  • No formula
  • No proof of cause
Ricerca answer

“Revenue in the MAN section is higher than WOMAN by 14.23%. Source: Zara file. Formula: segment revenue gap. Rows: 251.”

  • Computed by the calculator
  • Receipt attached
  • Interpretation stays inside the evidence

The right call, at the right moment.

Correct numbers are the floor. The value is the decision reaching the right person while it still matters — before a small drift becomes an expensive surprise. The same sealed box does this inside a classified facility and in a dentist’s back office.

A trend caught weeks before a milestone slipped.

Supplier data that legally can’t touch a cloud. By hand, every delivery looked on time. A watcher saw a subcontractor’s lead time lengthening each cycle and flagged it in time to re-source quietly — instead of filing a schedule slip. It works because the box is air-gapped: the analysis comes to the data.

Overtime creep, named before it broke the budget.

Resident records and payroll that must stay on-premise. Overtime was creeping across three departments; no single line looked alarming. The morning brief named the pattern before it crossed the quarter’s budget — and not one record ever left county control.

A payer quietly downcoded. Caught in week three.

Reimbursements on one procedure code had drifted down for a month. The owner-dentist would have found it at tax time, if at all. The watcher caught it in week three — thousands in recovered revenue — and no patient record ever touched the internet.

Half a point a week. Invisible until it’s fatal.

Food cost from one distributor crept up half a point a week — invisible on any single invoice, fatal over a quarter. The brief flagged the slope; the operator renegotiated before the margin was gone.

From a secure facility to a strip mall, the same promise: a sealed analyst that never sleeps, never leaks, and tells you what to do before it’s a problem. The proof below is how you know you can act on it without second-guessing.

It can’t lie about a number — by design.

The moment software can type a number, it can lie about it. So in Ricerca the part that writes the words is never handed a number — only a key to one a calculator already computed. A deterministic compiler then strips anything ungrounded before it reaches you.

An LLM tool cannot show you the receipt for a figure it imagined. Ricerca always can — source file, formula, exact rows, on demand.

Two lanes. One meeting point.

The numeric lane

Cleans your data (raw always preserved), fingerprints the shape of every finding, and computes each figure as a cell — a value plus its proof. The writer gets keys, never values, so it can’t fabricate.

The narrative lane

Reads documents for color only — names, themes, positioning — with every number redacted. Even scanned, image-only PDFs are read by a local vision model, never for figures.

They meet once, at the writer: documents add color, the calculator owns the numbers. A vendor’s slide can never become a reported statistic.

The charts it draws from your data.

Ask in plain English. Get back grounded answers where every number carries a receipt — and charts chosen by the shape of the finding, never a template.

Ask Ricerca — grounded answer

If it runs on your hardware, it isn’t air-gapped.

Ricerca ships as a sealed, dedicated appliance — its own trust domain. A compromise of your network never reaches its models, its receipts, or its reports. And it never reaches into your systems. Built for the environments where that line is non-negotiable: government, defense, finance, healthcare.

Customer systemsnightly batch
files
Dedicated folderapproved file types
air-gap · live ~2 AM only
Ricerca Appliancesealed · offlineown trust domain · never phones home
read-only
Screengrounded analysis

Physically severed ~22 hrs/day

A scheduled hardware air-gap switch connects the network only during a brief nightly window. The rest of the day the Ethernet is literally cut. No always-on path to attack.

One narrow interface

Approved file types into a dedicated folder. The appliance only reads designated files — it cannot write to, scan, or control your environment.

Offline by construction

All compute, language, and vision run locally on the box. Nothing leaves it. The box never leaves the building.

No environment lottery

We own the hardware and the image — one controlled, reproducible, supportable unit. Not “works on my machine” across a thousand setups.

One real run. Every number verified.

From a single end-to-end run on a real retail dataset — observed at every step.

14.23%
revenue gap, computed & receipt-backed, leading the report
32 → 10,300
chars: an image-only PDF made readable by the local vision engine — numbers redacted
100%
of reported figures trace to a source receipt (formula + rows)
8
watchers monitoring the business — anomaly, cost, churn, revenue & more
~22hrs
per day the appliance is physically air-gapped
0
data packets that ever leave the box

The analyst who never sleeps.

At 2 AM the air-gap opens for minutes; the appliance pulls the day’s files, then goes dark. While the building sleeps it cleans, computes, charts, and checks the data’s integrity — catching a column gone blank or two metrics that stopped moving together.

By the time you unlock the door, a grounded brief is waiting: what moved, what’s anomalous, what’s at risk. Every number with a receipt. Every guess labeled as one. You didn’t ask. It was already done.

02:00 pickupoffline analysismorning brief
Owner opening a business while an upright Ricerca appliance shows the morning brief
Before the first customer walks in, the brief is already waiting.

An analyst on a box.

Appliance
$10,000one-time · the box
  • Sealed, air-gapped hardware appliance
  • Full grounded engine — charts, chat & verified reports
  • All 8 watchers + daily / weekly / monthly briefs
  • Document + vision ingestion · integrity monitor
  • No install · no cloud · no subscription
Request a briefing

The hardware is bundled on purpose — it’s what delivers the isolation, the offline guarantee, and the no-install support model.

What arrivesSealed workstation
ConnectionScheduled air-gap path
InstalledModels, watchers, receipts
OutcomeMorning brief + verified report

Bring us your hardest dataset.

Government, defense, and enterprise inquiries welcome. We respond personally.

Or email hello@ricerca.example