What you’ll actually see
- A real working session ending with one word — and the confirmation that comes back, including how much of it was accounted for.
- That same work found again weeks later: the entry, the write-up, and the untouched original underneath.
- An AI trying to change something important, and being stopped — not talked out of it.
- A request raised by one assistant and answered from a different one entirely — desk in the morning, phone that evening.
- The list of what an AI is allowed to do, showing that anything off the list isn’t refused so much as absent.
- A leftovers question — what was still open from an old job, and which of those nobody ever went back to.
- The folder itself, open on a laptop with nothing running, showing the same paragraph the assistant just quoted.
It’s a live system, not a demo environment. If something is slow or awkward you’ll see that too.
Is this for you?
Probably yes if you use AI most working days and have started noticing that important things only exist in old chat windows. That’s especially true if you look after systems for other people, run a small team where one person carries all the knowledge, or work somewhere that “the AI did it” isn’t an acceptable answer.
Probably not if you use AI occasionally for one-off tasks — there’s not enough being lost to be worth the setup. And definitely not if what you want is an AI that goes off and does things without asking. That’s the specific thing this was built to prevent.
Four things we’re not going to pretend
You’ll find these out eventually. Better you hear them from us now than discover them in month three.
The AI still runs on the internet
The thinking is done by Grok, Claude or ChatGPT on their servers, using the account you already pay for. Anyone promising a fully offline AI is selling you a much weaker one, and should say so.
We host it, at least to start
This isn’t consumer software yet, so today we run it for you — your own separate copy, its own files, its own key, never a shared system with everyone’s work in one pile. It’s much the easier way to begin.
The questions people ask next are answered below.
Nobody has audited us
No outside security firm has reviewed this. What we do instead is publish the list of things we test, and mark honestly which ones we’ve actually proven and which are still just intended. That list is on the security page.
It won’t run your business for you
VaultHelm never takes you out of the loop. That is the whole design.
We run a larger version of this ourselves. Ours also keeps a calendar, tracks jobs through to done, and watches equipment across the sites we look after. None of that is in what you’d be buying today. They’re being packaged to snap on afterwards, one at a time, and we’ll say when each is ready.
What ships now is the part everything else needs: the record, the connection, the search, and the word that files it. We would rather sell you a small thing that works than a long list you have to take on faith.
A select beta, opening shortly
We are taking on a small number of shops, one at a time. Not a waiting list for its own sake — every setup is done by hand at the moment, and doing that properly is slower than doing it at volume.
There is no price list yet, deliberately. We are not going to publish a number before we have watched this work in somebody else’s business rather than our own. When there is a price it will be on this site, not quoted differently to different people.
What being in the beta actually means: you get set up by the person who built it, you get told which parts are proven and which are still just intended, and if it turns out not to fit your shop we will say so and you keep the folder either way.
Get in touch
Email hello@vaulthelm.com and tell us roughly what you do, which AI you already use, and how much you’re juggling — a few customers or a few dozen. We’ll tell you honestly whether it’s a fit before anyone books anything.
If you’ve found a security problem, same address. That jumps the queue ahead of everything else.
Questions we get asked first
Do I need a powerful computer, or a server?
Neither. The AI does its thinking on Grok’s, Claude’s or ChatGPT’s servers exactly as it does now, and we host the VaultHelm side for you. There is nothing to install and nothing to keep running.
Where does my information actually live?
For now, with us — but in your own separate copy, with its own files and its own key, never mixed in with another customer’s. Separately from that, whatever you type to your AI goes to that AI’s company on your own account, under the agreement you already have with them, exactly as it does today.
Can I keep using the AI subscription I already pay for?
Yes, and that is the intent. VaultHelm does not sell you AI. It sits underneath whichever one you like.
Can I run the whole thing in-house?
Not today. We host it, and that is the only way it ships — your own separate copy, never pooled with anyone else’s. Running the AI inside your network is a firmer no: it needs real GPU hardware and leaves you a markedly weaker assistant than the one you already pay for. If a policy genuinely requires either, tell us and we will talk it through honestly rather than quote you something we have not built.
What if I want to switch to a different AI later?
Nothing happens to your record. It isn’t tied to any one of them.
How hard is it to set up?
Using it is one word at the end of your day. Installing it isn’t consumer software yet — today that’s a job for someone comfortable with servers, which usually means we do it for you. We’d rather say that now than halfway through.
What happens if I stop paying?
You get the folder. Your record is ordinary text files with their full history, and we hand the whole thing over — it opens in any text editor on any computer. There is no export process because there is nothing proprietary to export it from. That is rather the point of storing it this way while we are the ones hosting.
Is my data used to train anything?
Not by us, ever — not for training, not for anything else. We host your copy, which means we could technically reach it; we don’t, and it’s never pooled with anyone else’s. Whatever your AI provider does with your conversations is between you and them, and is unchanged by using this.