Your sovereign personal AI.
A local-first, multi-pillar AI platform you own end-to-end.
Bastion holds your data. Nexus runs your models. Aegis protects. Beacon connects. Mission Control puts you in charge.
No central servers. No vendor lock-in. No surveillance. Yours, forever.
What if your AI was actually yours?
Today's "AI assistants" send everything to someone else's server. Your inbox, your calendar, your photos, your medical records, your private conversations — all transit through infrastructure you don't control, used to train models you'll never see, governed by terms you didn't write.
Ancilla flips that. Your AI runs on your hardware. Your data stays on your storage. Your routing decisions happen locally. When you want to use a cloud model, you decide which one, under what terms, for which request — and you can see exactly what left your machine.
Built for sovereignty. Designed for decades. Open-source from the day we're ready to ship.
Five pillars, one platform
Mission Control
The boss. One place to see everything and configure anything — desktop, phone, panel widget. The human is in charge.
Bastion
The data. Sovereign personal store with cryptographic identity, granular consent, and decades-long longevity. Yours by design.
Nexus
The compute. Smart routing across local models, your own rented GPUs, and (when you choose) cloud APIs. Every decision visible and auditable.
Aegis
The security. Vulnerability, supply-chain, anti-malware, AI-threats — eight defensive capabilities woven into one pillar so you can rest.
Beacon
The mesh. Works when the internet doesn't — LAN, Bluetooth, LoRa, mesh radio. Resilient by default.
Why Ancilla is not just another local AI tool
-
Local-first sovereignty.
The default is your hardware. Cloud is opt-in per request, never silent.
-
Cross-instance identity without central servers.
Every Ancilla install gets its own cryptographic identity. Two Ancillas can talk, share, inherit — verified end-to-end. No registry. No one can spoof you.
-
Substrate, not another AI tool.
Ancilla is the layer your AI agents sit on top of — your memory, identity, routing, sensitivity gates, all yours. General-purpose agents (Hermes, OpenClaw, Goose) become the brain Ancilla dispatches to. Coding tools you already use (Claude Code, OpenCode, Cursor) pick up the same substrate via MCP. Switch brains anytime — Ancilla stays.
-
Built to outlive itself.
Open file formats, open APIs, documented schemas. If Ancilla's code disappears, your data is still recoverable by anyone with a filesystem.
-
Decades-long longevity.
Multi-region, multi-currency, multi-language, multi-jurisdiction from day one. Your AI when you move, when you travel, when the internet goes out, when you hand it down.
What Ancilla does for you
- Capture
- Voice, text, screen, audio — never lose a thought. Multi-channel inbox with smart routing.
- Memory
- Decades of email, photos, calendars, locations, messages — one queryable, sovereign store.
- Reasoning
- Local models for routine, your rented GPUs for heavy lifting, cloud APIs when you pick.
- Routine
- Reminders, recurring tasks, digests, automations you author or share, transparent and revocable.
- Privacy
- Cryptographic identity. Sensitivity-aware sharing. Per-correspondent pseudonymity. Air-gapped option.
- Resilience
- Backup-first. Mesh networking. Inheritance built in. Designed to survive your laptop dying or you dying.
Where we are right now
- In active development. Five pillars under build — Mission Control, Bastion, Nexus, Aegis, Beacon — plus a federated identity layer and harness substrate.
- v0.0.1 open-source release when the code works reliably end-to-end. No fake deadlines.
- Want a heads-up when it ships? Email hello@ancilla.live with the word "interest" — we'll add you to a list. (Interest form on this page coming soon.)
- Or follow along live: Reddit (r/ancilla_live) and X (@ancilla_live).
When the code is ready, it will be free, Apache-2.0 licensed, and yours to run.