Commitment
Enclave Sovereignty
A shared team workspace — vault, models, and agents — on a Mac you own. Not a vendor's cloud.
How it works today
Every “team AI” quietly uploads your work
Your contracts, client files, case notes, deal memos — the most sensitive things the company owns — sit on a vendor's servers. “You own your data” almost always means it's theirs, scoped to you.
The usual move is a hosted RAG: dump the wiki into their cloud, embed it, query it through their API. Every agent on the team is a client of that store.
For work under NDA, that isn't a policy footnote. It's a dealbreaker. You get a shared brain. They get the corpus.
Data path — today
Your work uploads to their servers. Every query is a copy they hold.
How Recursion does it
Enclave turns it inside out
One always-on Mac in your office becomes the Hub — it holds the shared vault and can serve the heavy models. Every teammate runs the full workspace on their own Mac, with their own private chats and files.
A member's question can run on the Hub's big model. The computation travels; the records don't. Remote inference, never remote data.
An encrypted mesh on your network connects members to the Hub. No public endpoint. Unplug the internet and it keeps going. The only thing that ever leaves the building is a signed license check.
Data path — Recursion
Members reach the Hub on your network. The vault stays on a Mac you own. The internet is severed.
What Enclave is
- A private team AI workspace on Courier OS: Hub, vault, local models, Scout, Emissary, and an encrypted mesh — all on hardware you own.
- The Hub is one always-on Mac (a Mac mini is enough). It holds shared vaults and can serve larger models the team can call.
- Each member runs a full local workspace. The vault is the only shared surface, granted per person. Plain files — markdown and documents — not a proprietary database you can never export.
What never leaves the building
- Vaults, documents, prompts, responses, inference (local or on the Hub), chats, files, and history stay in your building.
- The only egress is a signed license check — no customer data.
- If a subscription lapses, adding members and Hub-served models pause. Your data stays yours and readable. You are not locked out of your own knowledge over a billing hiccup.
Access
- One flat rate per Hub — currently $400/mo — covering unlimited people and unlimited agents. No per-seat, no $100-an-agent meter.
- The public Enclave site is the product surface; this page is the ownership policy behind it.