Data leaves the building
Every prompt, document and answer goes to the vendor's cloud. An "EU data centre" is a contractual promise – not a physical boundary.
aidirect · IT Direkt AB
AI that never leaves your building.
The same AI capability as the cloud – without your data leaving the building. A finished AI appliance for organisations that cannot, or will not, send their data to the cloud.
No outbound internet
ISO 27001 · Halden
The model is a file
Fixed price
0bytes
out by default
The appliance ships with no outbound internet connection.
1file
is the model
Versioned, auditable, replaceable.
0SEK
per extra question
Unlimited use within your tier. No per-token billing.
The cloud's hidden price
Four things the cloud vendor does not mention
The CLOUD Act
The major cloud vendors are US companies. US authorities can compel disclosure regardless of where the server stands. No contract can waive it.
Internal over-sharing
Cloud AI indexes everything a user technically has access to. One wrong permission in the file structure becomes a leak in seconds.
No control
The model is swapped without warning. Logs, telemetry and abuse monitoring sit with the vendor – not with you.
aidirect
A finished AI appliance in your own server room
Or hosted in an ISO 27001-certified data centre in Halden that we have access to. You choose where the box stands – we make sure it works.
Sovereignty
No foreign data processor and no third-country transfer. The appliance ships with no outbound internet connection.
Predictable economics
One capital purchase plus a service agreement. No per-seat licence that grows with the headcount, and no billing per question – unlimited use within your tier.
Simplicity
Plug and play. Chat, document search across your own files, and an API – without anyone having to become an AI engineer.
How it works
Everything happens inside your firewall
Users ask. aidirect answers from your own documents. Nothing passes out. The model is a file on your disk – it can be swapped, versioned and audited on your terms.
Users
Web chat for everyone, a plugin in Office, an API for developers. No new password and no new system to learn.
aidirect
An open model in the 200B–750B class with MoE architecture. Document search across your files. Per-user permissions, mirrored from your directory.
Your data
File server, on-prem SharePoint, records systems, case systems. You decide what gets indexed – the rest is invisible to the model.
Comparison
The same question. Two very different answers about where your data goes.
| Microsoft 365 Copilot | aidirect | |
|---|---|---|
| Where is the prompt processed? | Microsoft's data centre (Azure) | In your server room – or in an ISO 27001-certified data centre in Halden |
| Who can be compelled to hand over data? | Microsoft – a US company, CLOUD Act | Nobody. The data exists only with you |
| What can the AI see? | Everything the user can access in M365 | What you choose to index |
| Who chooses the model? | The vendor, swapped without warning | You. A versioned file on your disk |
| Logs and telemetry | With the vendor | With you – or none at all |
| Cost, 100 users, 3 years | ≈ 1,116k SEK, and it keeps running | ≈ 1,027k SEK (Large), then you own it |
The models
Lokalt trenger ikke bety dårligere modell
For the tasks that dominate office work, open models go a long way – and they run on hardware you own.
Model classes we deliver
From a model that fits on a single card to one that needs a node with several GPUs. Your tier decides which class you get.
Mixture of experts
Only a fraction of the parameters activate per token, giving capacity that would otherwise need considerably more hardware.
Modellen ligger hos dere
The weights are a file on your hardware, not a service you call. Which model you run is decided together with you.
Which model you get is settled during the assessment and written into the agreement. The model is a versioned file on your disk – not a subscription – and is swapped when we judge a newer one to suit your use case better.
Who it is for
Organisations where "policy" is not an adequate answer to the regulator
Law
Legal professional privilege. Client data cannot be processed by a third party under foreign jurisdiction.
Audit & accounting
Books, payroll, national ID numbers. Summarise annual accounts without sending them to the US.
Health & care
Medical records and health data. The Patient Data Act and GDPR Article 9 – third-country transfer is where it stops.
Public sector & SMEs
Procurement requirements on data localisation. A fixed price instead of a running licence.
The law
Why the cloud is not enough
Confidentiality, national ID numbers and security-classified information – the law points the same way. References below are to Swedish law, where IT Direkt AB operates.
GDPR Art. 44–49 and Schrems II
Third-country transfer requires a valid basis. A US vendor means US jurisdiction regardless of where the data centre stands. The CLOUD Act (2018) and FISA 702 give authorities access without the customer being informed.
GDPR Art. 9 and national ID numbers
Health, union membership, ethnicity and criminal data are special categories. Swedish personal ID numbers may only be processed where clearly warranted (Data Protection Act, ch. 3 s. 10). Feeding them into a cloud prompt is a processing operation that has to be defensible.
The Public Access to Information and Secrecy Act
OSL (2009:400): information under secrecy may not be disclosed to outsiders. eSam and the Swedish data protection authority have held that if a foreign vendor can be compelled to hand over data, the assessment is that the information has been disclosed – regardless of encryption or contract.
Legal privilege and professional secrecy
Code of Judicial Procedure ch. 8 s. 4 and the Bar Association's guidelines: client information may not be handled so that a third party can gain access. The same logic applies to auditors (Auditors Act s. 26) and healthcare (Patient Data Act 2008:355).
The Protective Security Act
SSL (2018:585): security-classified information may not leave a controlled environment. Cloud-based AI is excluded by definition. NIS2 and the Cybersecurity Act tighten the requirements across the whole supply chain.
Accountability and burden of proof
Article 28 on processor agreements, Article 35 on impact assessments and Article 5(2) on accountability: you must be able to show where data is processed, by whom and why. Local AI makes that answer trivial. The cloud makes it an audit question.
GDPR administrative fines: up to 4% of global turnover. Breaching OSL or the Protective Security Act is a criminal offence for the individual officer.
An overview of the legal position, not legal advice. Always make your own assessment with your data protection officer or legal counsel.
Running in a day
Not an IT project. No consulting phase.
Delivery
The appliance arrives pre-configured. Power and a network cable are all it needs.
Connect your data
Point it at a file server or document archive. Permissions mirror automatically from the structure you already have.
Start asking
Web chat for everyone, an API for developers. First answer within the hour.
Pricing
Three tiers
Hardware plus a 36-month service agreement. You own the hardware from day one.
Small
From49 tkr
+ service 2,5 tkr/mån
- 1–15 users
- Chat and document search across your own files
- Model in the 30B class
- API and integrations
- Unlimited use – no billing per question
- Support in Swedish and Norwegian
Medium
From299 tkr
+ service 3,9 tkr/mån
- 15–60 users
- Chat and document search across your own files
- Model in the 100–250B class
- API and integrations
- Unlimited use – no billing per question
- Support in Swedish and Norwegian
Large
From599 tkr
+ service 11,9 tkr/mån
- 60+ users or multiple departments
- Chat and document search across your own files
- Frontier open model, 400B+
- Redundancy and GPU-cluster
- API and integrations
- Unlimited use – no billing per question
- Support in Swedish and Norwegian
Prices exclude VAT. The hardware is yours from day one – the service agreement keeps it running.
The service agreement
You own the hardware – we make sure it works
Model updates
A new open model is tested, quality-assured and rolled out when it beats the one you run. You never swap it yourself.
Security patches
Operating system, inference engine and web interface are kept current under the service agreement.
Monitoring and health
GPU temperature, disk and response times. We see a fault before you notice it – without seeing your data.
Hardware warranty
A failed component is replaced on site for the term of the agreement. A spare unit is offered on Medium and Large.
Support
Swedish and Norwegian support on weekdays. The same support whichever tier you are on.
Training and RAG tuning
User onboarding and help structuring document sources so the answers come out well. A quarterly review on Large.
We have remote access to the system's health – never to your documents or prompts. That is written into the agreement.
Economics
The cloud grows with every user. aidirect does not.
Total cost over 36 months. Cloud AI costs 310 SEK per user per month – every new employee adds a line to the invoice. aidirect is a fixed price per tier, however many people ask and however often.
Cloud AI, 310 SEK per user per month
aidirect, fixed price per tier
0 SEK
To add a user within your tier. The cloud bills 11,160 SEK per user over the same three years.
≈ 92 users
Where aidirect Large overtakes the cloud. After that the gap widens with every new employee.
Unlimited
No billing per question or token. A heavy user costs exactly what a light one does.
Calculated on list price excluding VAT and a 36-month service agreement. In the lower part of each tier the cloud is cheaper on licence cost alone – the argument for aidirect is then confidentiality and control, not money. We will tell you which one applies to you.
The model is yours. Your questions stay with you. That is the difference.
The next step is an on-site demo with your own documents. 45 minutes, no installation at your end.