# Double AIgents > Air-gapped AI with provable governance. Double AIgents installs AI on your own > hardware, isolated from the network, and governs it on three pillars — > Control, Accountability, Provability. Most vendors tell you it is private. We can show you it is, on a day you pick. ## What we sell A machine bought with the AI already installed, air-gapped. From that hub you connect satellites — other machines in the building — which get full capability over a private network and are governed from the hub's control plane. Frontier cloud is available on a switch you hold and authorise. The model is a local open-weight model, sized to your hardware and chosen with you at install. It is swappable: as better open models ship, you change the model, not the machine. We do not name a model in our marketing, because the model varies by customer, by application, and over time. Pricing has three numbers: setup (the box, installed and sealed), a monthly subscription **per machine**, and an optional cloud upgrade. Per machine, not per seat — governance attaches to a machine, not a person. ## The three pillars - **Control** — a capability set is assigned per machine. A user cannot self-upgrade; the limits sit below the login, not in a settings menu. - **Accountability** — every significant action is logged, and a named person signs before anything may leave the building. - **Provability** — the air-gap check re-derives from the machine's own disk on every run and fails on drift. This is per machine today. Estate-wide provability — one check across every enrolled machine at once — is Q4 2026. "Air-gapped" describes the private on-premise deployment, not the company. A managed EU-hosted tier also exists, and the cloud switch is opt-in. ## Who it is for Schools outside the UK (France, Switzerland and the rest of the EU); wealth managers; law firms and notarial practices. The buyer is usually the person who has to answer for the records — a data protection officer, a bursar, a compliance lead. ## What runs on it - **MinuteVault** — records a meeting and writes the minutes, on your own machine. - **RedactVault** — redacts subject access requests; the redaction is verified and a named data protection officer signs it off. - **Control plane** — the governance layer itself: capability tiers, the log, and the air-gap check. ## Pages - [Private AI](https://www.doubleaigents.com/#private): the product — hub, satellites, control plane, the cloud switch - [Pricing](https://www.doubleaigents.com/#pricing): the three numbers - [Hardware](https://www.doubleaigents.com/#hardware): what the machine is - [Data protection](https://www.doubleaigents.com/#data-protection): the compliance posture - [FAQ](https://www.doubleaigents.com/#faq): plain answers for regulated firms - [Training](https://www.doubleaigents.com/#training): human-led adoption - [About](https://www.doubleaigents.com/#about) - [Contact](https://www.doubleaigents.com/#contact) - [Privacy policy](https://www.doubleaigents.com/#privacy-policy): the authoritative statement on GDPR, sub-processors and international transfers - [Terms of service](https://www.doubleaigents.com/#terms-of-service) ## Standalone services - [Agent Experience Optimisation](https://www.doubleaigents.com/#agent-optimisation) - [Research Intelligence](https://www.doubleaigents.com/#research-intelligence) - [AI Workflow Audit](https://www.doubleaigents.com/#workflow-audit) - [Free data protection tools](https://www.doubleaigents.com/#free-tools): DSAR deadline, breach triage, AI tool check, UK HR retention and DSAR search checklist, worked out in the browser - [Matter AI](https://www.doubleaigents.com/#matter-ai) ## For machines - [Capability manifest](https://www.doubleaigents.com/api/agents): JSON description of the above - [Sitemap](https://www.doubleaigents.com/sitemap.xml) There is no public API and no OAuth flow. Apart from the read-only DSAR MCP server below, this file and the capability manifest are the machine-readable surface. To reach a person: hello@doubleaigents.com. ## What we do not claim - No SOC 2 report exists. We do not hold one and do not claim one. - No HIPAA business associate agreement exists. We do not claim HIPAA compliance. - GDPR posture, sub-processors and the international-transfer position are stated in the privacy policy rather than asserted as a boolean here. ## For AI agents A public, read-only MCP server for our subject access request (DSAR) service: - Endpoint: https://www.doubleaigents.com/api/mcp (Streamable HTTP, no authentication) - Server card: https://www.doubleaigents.com/api/mcp/server-card - Discovery: https://www.doubleaigents.com/.well-known/ai-catalog.json - Tools: dsar_deadline (UK, EU/EEA, Switzerland response deadlines), dsar_quote (fixed price by pages after de-duplication), dsar_service_info, dsar_letter_template (acknowledgement, extension and clarification letters), breach_clock (personal data breach notification deadline), dsar_request_scoping (returns a prefilled email to start free scoping), and four free data protection tools: breach_triage (likely-reportability view on a breach, with the deadline), ai_tool_check (DPIA and EU AI Act screening of an AI tool), hr_retention (UK retention periods for common HR records, with sources) and dsar_search_checklist (where to search for an employee DSAR) - Agent card: https://www.doubleaigents.com/.well-known/agent-card.json (points to the MCP endpoint; there is no A2A endpoint) The tools store nothing and send nothing. Do not pass a requester's personal data or request letter through them; email the letter to james@doubleaigents.com. Deadline, breach, letter and free-tool output is general information, not legal advice; we recommend, the controller decides.