Bastios puts an AI executive assistant and a library of business tools on a Mac you own, with serious privacy engineering at its core. It was engineered around what the big AI labs hate most: your customer names, your people, and your secrets are disguised before a single word reaches their model, and anything tagged financial or personal never reaches them at all. Their models do the work. They never know whose business they're working on.
Paste your books, your customers, and your process into a cloud chatbot and the model learns your business, so the lab behind it can price you by the token, train on your data, ship a competing product, or turn off your connection to their AI. Bastios is built the other way.
The details that identify your business (who your customers are, who your people are, your secrets) never leave your box in the clear. The AI does the reasoning; out of the box, it never learns who you are, and a masked name can never come back as the wrong person. Your alpha stays yours.
Single-tenant on a Mac mini you own. Your books never leave by default, Bastios never trains on your data, and nobody can reach in and switch your box off.
Swap Claude, GPT, or a cheaper open model in a click. You're not locked to one lab's pricing for tokens you can't measure. Run the model that fits the job.
Your process, your data, and your competitive edge stay on your box. You're building your business, not training your own replacement.
An AI executive assistant paired with a library of business apps, running on a Mac mini you own. You talk to it in plain English; it answers with cards and queues every real action for a human. Permissioned by default.
Your box, on the loopback: this app is served from your machine, not the web.
Ask in plain English. No dashboards to learn. Just tell it what you need.
KPIs, briefings, and tables render inline: answers you can read, not files to dig through.
Anything that spends money, sends a message, or leaves the box queues for a human first.
It runs on a Mac mini you own and control, not someone else's cloud.
Bastios is multi-user from day one. Add your people, give each a role, and the kernel enforces exactly what they can do, on every single action. One Mac, one bill, your whole team on it.
Bastios runs an AI agent on a Mac mini you own. Its security comes from ownership, containment, and transparency: every action is checked before it runs, the dangerous ones wait for a person, and the whole story is written down. A system you can actually inspect, not a promise of invulnerability.
Everything Bastios does (read a file, move money, send a message) is checked before it runs. Nothing you didn't allow. The risky things wait for you.
The app, your files, and your data live on a Mac mini you own and control, not on someone else's cloud. Your logins and business data stay on that machine, not in any shared or synced location.
Bastios checks every action against what you've permitted before it happens, and if it's ever unsure, it stops rather than guesses. It fails safe, never wide open.
With no AI key, Bastios works offline and sends nothing out. With your key, your context goes to your chosen provider only to draft replies. Your customer names are kept out of what it sees, and anything tagged financial or personal never reaches it at all. The AI does the reasoning; it never learns who your business is about. And if a term must never travel (a client, a deal, a codename) tell Bastios once: it's kept from the AI everywhere, or refused outright, in every mode.
Money, outbound sends, and calls always wait for a person: it's built in, not a setting that can be switched off or quietly automated away. And your sensitive financial data isn't allowed out to the AI in the first place.
Everything the AI does (allowed, refused, or waiting) is written to a record you own and can review, with when it happened and who approved it. Auditors see every AI action, not just the payments.
Bastios isn't exposed to the open internet the way a website is, and it can't go install or run whatever it likes on your machine. It only ever does the specific jobs you've set up, so entire categories of attack simply don't apply here.
The honest posture: security through ownership, containment, and transparency, not a promise of invulnerability. A separate AI reviewer (not the builder) re-ran the full safety suite, wrote probe attacks, and confirmed the controls hold and fail safe throughout.
Apps are the software add-ons you attach to the platform. Each one runs a slice of your operation. The Executive Assistant is included in every package as the core engine; your package decides how many apps you bolt on around it: one, two, or all of them. New apps arrive over time, and Stay Current keeps the ones you own up to date.
Your AI chief of staff: the engine every package ships with.
Automated bookkeeping you own: no vendor lock-in.
Get paid: an escalating collections engine.
Your company brain, searchable and self-serve.
Win the job: estimates that learn your pricebook.
Reputation & demand, in your voice.
Never miss a call, or a customer.
Every package ships with the Executive Assistant. Switch on business apps when you need them, about $10,000 each, one time.
Your business already runs on software you built or bought: the pricing model, the ops database, the app only your team understands. Bastios connects to it.
Bastios writes the connection instructions for your specific tool; your own developer (or your own coding AI) does the hookup, typically the same day. No Bastios engineers in your codebase, ever.
An outside tool is treated as untrusted, no matter who built it. Bastios governs every byte at the box: confidential identities are disguised before anything leaves, regulated identifiers never leave at all, every exchange is logged, and you approve what any tool may receive.
Bastios can put your tool's logic to work mid-task, and your app can put Bastios to work behind it, as the governed AI brain your software calls on. Built on open standards (MCP).
Want your own software wired in? Custom connectors are one-time work that stays yours, quoted to the job. The standard connector catalog still ships with every box.
Rolling out now: the first pairings are underway.
Choose your team size. See what it costs to get started and what to budget each month.
Fine-tune from 1 to 25 users, then explore larger teams.
Pricing for 12 users.
$5,900
Your package and hardware, sized for your team.
$746 / month
Assumes $30 of AI usage per user each month. Usage above the $100 included credit is billed at cost plus 6%. Actual monthly charges vary with usage. Displayed fees are rounded to whole dollars.
Your package
Mac mini, 32 GB
Up to 12 users
What your monthly includes
Secure access, updates and model improvements, plus $100 of AI usage each month.
Ready to get started?
Join the waitlistAdd-ons: Apps added later at about $10,000 each, one time. On-site installation $2,799.
You own the box, and your data stays on it. No per-transaction fees, no lock-in: your audit ledger is yours, forever. Stop the monthly service and the box, your data, and everything you bought stay yours.
No servers to stand up, no data to migrate to someone else's cloud, and nothing to install, ever. Pick a package, we build your Mac and deliver it ready to go, you connect only what you approve, and go live with every real action queued for a human.
Tell us how many people need Bastios and we size the box to your team. Add business apps whenever you want them. Nothing is locked.
Every package, same treatment: we physically set up your Mac in-house (Bastios installed, configured, and primed with your business context), then deliver it to you ready to plug in. You install nothing.
The only step left: link the connectors you want (Google and the rest) with a guided walkthrough. Permissioned by default; nothing is touched without an explicit grant from you.
The assistant does the work. Real actions queue for approval, and every move is written to a ledger you keep forever.
Every box arrives fully set up by us. Connecting your apps takes a few minutes with a guided walkthrough. If you would rather we did it in person, we can.
Your box arrives fully set up by us. A guided walkthrough links your email, calendar and files in a few minutes.
We come to you, connect everything, verify it is right, and train your team in the room with you.
Every package arrives fully set up by us. On-site installation is available for any team size. See all packages
Bastios is a product you run and supervise, not a service we operate for you. Bastios does the work; humans keep the controls.
AI is the biggest productivity lever in a generation. Bastios is built to capture it on your terms: on hardware you own, gated by approvals you control, with a receipt for every action. Below is what makes it different, and how big the prize really is.
Financial records, employee info, and customer data stay on a Mac mini you own, by default. Cloud SaaS keeps your data on their servers, under their terms.
vs. cloud: your data on someone else's boxSpend, send, and call actions always wait for a person: it's built in, not a checkbox in a settings page. They can't be quietly switched off or automated away.
vs. cloud: a toggle a script can flipNot just payments: every read, draft, and send the AI performs is written to a log you keep. Auditors see exactly what happened, when, and who approved it.
vs. cloud: partial logs you can't exportBookkeeping lives in an open, plain-text double-entry ledger: no proprietary format, no lock-in. Cloud bookkeeping vendors have collapsed and locked customers out of their own records; yours stay readable with or without us.
vs. cloud: records you can be locked out ofOne predictable license. No toll booth on every ACH, card swipe, or invoice, unlike AP and payment SaaS that meters you per transaction as you grow.
vs. cloud: a fee on every paymentEmail triage hard-boosts your sponsor and lender domains. The contract reader flags change-of-control and auto-renewal clauses on sight. Context generic tools simply don't have.
vs. cloud: built for everyone, tuned for no oneIf the AI provider is unreachable, Bastios doesn't go dark. Cards still render and core work continues with templated fallbacks, so the box keeps running even when the model doesn't. And when something can't be done, Bastios says so: it never papers over a gap.
vs. cloud: provider down means you're downIndependent research on what AI unlocks across the economy. These are industry findings, not Bastios's own results: the upside Bastios is built to capture, securely.
Everyone is racing toward AI. The operators who win are the ones who capture the upside without handing over the keys.
Need a new field, a rule that fits how you work, a whole new step in a workflow? Just ask. Bastios reshapes its own apps to match: every change reviewed, gated, and reversible. No dev queue, no ticket, no waiting on us.
Just ask. No dashboards to configure, no code to write. Say what you want in plain English.
The guardrails are off-limits. Forge reshapes your apps, never the shield, and every change waits on your approval first.
Always reversible. Every change is checked before it goes live and rolls itself back if anything looks off.
Talk to our AI right now: tell it the problem you most want solved and it can put you on the waitlist. Prefer typing? Leave your details and we'll reach out.
We'll get back to you about Bastios, usually the same day.
In the meantime, take a look at how Bastios keeps your data yours.
Have a live voice conversation with our AI. Ask it anything about Bastios. It will also ask your name, company, and email, and the one problem you most want solved, and can put you on the waitlist.
This conversation is recorded and transcribed, and is used as market research to improve Bastios and Bastios AI LLC products. We never sell your data. Voice processing is provided by ElevenLabs. See our Privacy Policy.
Bastios