Under the hood
Most AI vendors hide the architecture and sell the magic. We do the opposite. This page walks through the real platform, layer by layer, so your IT and security team can check it. That is the point.
Why this platform
Airgapped and ICS Nett partnered for one reason: both companies treat data sovereignty and security as non-negotiable. When Thomas saw the depth of FinBlade and the size of the team behind it, the call was easy. Airgapped advises on the front end. ICS Nett delivers. Every engagement rests on three rules.
FinBlade runs in your environment: on-premises, in an isolated private cloud, or both. Your data is never sent to public AI services. Privacy is a property of the design, not a promise in a policy document.
Every user sees only what they are authorized to see. Every query and system action is logged. Sensitive actions wait for a human to approve them. Your reviewers can trace what happened and who did it.
ICS Nett has spent more than 20 years delivering secure, mission-critical IT for federal, state, and local government. That team deploys, integrates, trains, and supports your platform.
The platform, layer by layer
Read it bottom to top, the way it is actually built: where it runs, how it is secured, how your data comes in, how your knowledge is organized, how the intelligence works, and how your people use it.
Your team works through three doors. Chat AI drafts, analyzes, and builds documents, reports, and presentations from your own knowledge, within each user's rights. Dashboard AI turns plain-language questions into dashboards and business intelligence. Secure Chat gives your team encrypted messaging inside the platform.
Chat AI · Dashboard AI · Secure Chat · answers scoped to each user's permissions
FinBlade orchestrates multiple language models, including private models, and routes each task to a model that fits it. On top of that sit the working parts. Specialized Agents handle a specific role or function, pre-built or custom. Super Agent carries out multi-step tasks across your tools. Workflow AI automates business processes with triggers and approvals.
Multi-LLM orchestration · private models · Specialized Agents · Super Agent · Workflow AI
This is the layer that makes the output yours instead of generic. Your documents, records, and institutional knowledge become one enterprise knowledge base, linked by knowledge graphs and searchable through retrieval. Answers draw on what your organization knows, and each answer respects what the person asking is allowed to see.
Enterprise knowledge base · knowledge graphs · retrieval · permissions-aware answers
FinBlade connects to the systems your business already depends on: ERP, document management, CRM, databases, Active Directory, and APIs. Document intake with OCR turns scanned, handwritten, and unstructured documents into structured, searchable data. Your systems of record stay the systems of record.
ERP · DMS · CRM · databases · Active Directory · APIs · OCR document intake
Data is encrypted with AES-256. Role-based access control decides who can see and do what. AI behavior is governed, so answers stay limited to what each user is authorized to see. Every user action, AI query, and system action is logged for audit. Human-in-the-loop approvals keep people in charge of the decisions that matter.
AES-256 encryption · RBAC · governed AI behavior · full audit logs · human-in-the-loop approvals
The foundation is your choice of location. FinBlade can run on-premises, inside your own office or data center, and it is air-gapped capable. It can run in an isolated, single-tenant private cloud. Or it can run hybrid, with sensitive data and models on-premises and elastic workloads in your private cloud. The ICS Nett team handles infrastructure support in every option.
On-premises, air-gapped capable · isolated single-tenant private cloud · hybrid
Who does what
You should know exactly who is responsible for each part of your engagement. Here it is, stated plainly.
| Who | Role | What they do for you |
|---|---|---|
| Airgapped | Your advisor and advocate | Learns your business. Maps the work and the data rules. Recommends the deployment path. Scopes the engagement with ICS Nett. Stays your single point of contact and your advocate after launch. |
| ICS Nett | Technology and fulfillment partner | Deploys the platform. Integrates it with your systems. Designs workflows and builds custom AI where needed. Trains your people and leads adoption and onboarding. Provides infrastructure and software support. Hosts private cloud environments. |
| FinBlade AI | The platform | ICS Nett's enterprise AI platform, designed for regulated industries. Every Airgapped engagement is built on it: the security and governance, the data connectors, the company brain, the agents, and the tools your team uses every day. |
ICS Nett holds ISO 9001:2015, ISO/IEC 20000-1:2018, and ISO/IEC 27001:2013 certifications. These are ICS Nett's certifications, not Airgapped's. Airgapped is an independent advisory firm and ICS Nett's technology partner.
Three ways to run it
We recommend the path that fits your data rules and your work. The same guarantee holds in all three.
FinBlade runs inside your own office or data center, on infrastructure you own. It is air-gapped capable: nothing needs to leave the building. This is the strongest posture for the most regulated work.
Your private cloud environment is isolated, single-tenant, and runs on independently audited infrastructure matched to your requirements. Before you sign, we put in writing exactly which audits and certifications cover your environment.
Sensitive data and models stay on-premises. Elastic workloads run in your private cloud. You get the control of on-premises where it matters and room to scale where it helps.
The honest comparison
Public AI tools are useful, and many people use them well. They were built for individuals, not for organizations with data to protect. Here is the difference in practical terms.
What this architecture guarantees
These hold in every deployment option: on-premises, private cloud, and hybrid.
Your data is never sent to public AI services. The platform and its models run inside your environment.
Your data is never used to train anyone's model. Not ours, not our partner's, not a model vendor's.
Every action is permissioned and logged. Users see only what they are authorized to see, and your reviewers can trace every query and system action.
The exact data routing is documented in writing for your IT, compliance, or security team, so they evaluate the real architecture, not a marketing claim.
Technical questions
Two teams with two clear jobs. Airgapped, led by Thomas Summers, is your advisor on the front end: we learn your business, map the work and the data rules, recommend the deployment path, and scope the engagement. The ICS Nett team then deploys, integrates, trains, supports, and hosts the FinBlade AI platform. After launch, Airgapped stays your advocate and single point of contact.
Where you choose. On-premises, it stays inside your own office or data center, on infrastructure you own. In a private cloud, it stays in an isolated, single-tenant environment managed for you. In a hybrid setup, sensitive data stays on-premises and elastic workloads run in your private cloud. In every option, your data is never sent to public AI services, and the exact data routing is documented in writing for your IT, compliance, or security team.
FinBlade orchestrates multiple large language models, including private models, and matches each task to a model that fits it. The model choices for your environment are set during scoping and written down. What does not change: your data is never sent to public AI services and never used to train anyone's model.
No. FinBlade was built for demanding government and enterprise work, and through this partnership the same platform now reaches small businesses, mid-market companies, enterprises, and government or government-adjacent organizations. We scope the engagement to the size of your organization and the work you need done.
Same platform, different location. On-premises, FinBlade runs on infrastructure you own, inside your building, and it can run air-gapped so nothing needs to leave. In a private cloud, your environment is isolated, single-tenant, and runs on independently audited infrastructure matched to your requirements. Before you sign, we put in writing exactly which audits and certifications cover your environment. Hybrid combines the two.
Book a free call with Thomas. He maps the work, the data rules, and the right deployment path with you. If it fits, he scopes the engagement with the ICS Nett team. No pitch deck, no paid session.
Your AI. Your data. Your control.
Start with a free call with Thomas. We map your work, your data rules, and the right deployment path. If it fits, we scope the engagement with the ICS Nett team.
Book a callFree. Direct. No pitch deck. Serving organizations of every size, from Middle Tennessee to Washington.