Bastios
Meet your new AI ecosystem

Your secure AI operating system.

Bastios puts an AI executive assistant — plus a growing library of business modules — on hardware you own and control. Every action is permissioned by default, gated for human approval, and hardened against malicious prompts.

How the security works
● Runs on a Mac you own ● No cloud data store by default ● Your data is anonymized before it's sent to an LLM
Malware-Free Skills Human-approved actions Prompt Injection defense
Built for operators who can't send their data to the cloud PE-backed SMBs Finance & accounting Field-service operators Multi-entity portfolios
The Platform

An AI operating system
for the whole business.

An AI executive assistant paired with a library of business modules, running on a Mac mini you own. You talk to it in plain English; it answers with cards and queues every real action for a human. Permissioned by default.

Chat

Ask in plain English. No dashboards to learn — just tell it what you need.

Cards

KPIs, briefings, and tables render inline — answers you can read, not files to dig through.

Approvals

Anything that spends money, sends a message, or leaves the box queues for a human first.

Your data, your box

It runs on a Mac mini you own and control — not someone else's cloud.

Security model

Permissioned by default.
Approved by humans. Logged forever.

Bastios runs an AI agent on a Mac mini you own. Its security comes from ownership, containment, and transparency — every action is decided at one gate, the dangerous ones wait for a person, and the whole story is written down. Not a promise of invulnerability; a system you can actually inspect.

THE PERMISSION BROKER

Every tool call — read a file, move money, send a message — passes through one decision point before it runs. Default-deny. Fail-closed. No bypass anywhere in the code.

INCOMING ACTION
send_email · move_money · run_skill …
A request that arrives by text cannot approve its own gated action.
BROKER one gate · no bypass
RESOLVES TO ONE OF FOUR
  • Allowed Runs — and is written to the audit log.
  • Denied Doesn't run — and the refusal is logged too.
  • Pending approval Money, outbound sends, phone calls — queue for a human in Activity.
  • Hard-blocked Never runs, even with approval — e.g. finance data leaving the box without an explicit opt-in.

Runs on hardware you own

The app, your files, and the agent's state live on a Mac mini you own and control. Operational state and the policy file sit outside any synced folder; secrets live in the macOS Keychain, never in plaintext sync.

The permission broker

One enforcement point that's default-deny and fail-closed: if policy is missing or corrupt, it denies — it never defaults to allow. There is no bypass anywhere in the code.

What reaches the cloud — honestly

With no AI key, Bastios runs a keyless offline mode and sends nothing out. With your key, your context goes to your chosen provider only to draft replies. Default Pseudonymized mode swaps names for stand-ins and redacts secret formats first; the mapping key lives in memory only and is never stored.

Approval gates are architectural

Money, sends, and calls are gated at the broker — infrastructure, not a UI toggle — so they can't be misconfigured or automated away. Finance-tagged data is hard-blocked from leaving the box unless you explicitly opt in, enforced in code, not a warning dialog.

Every action is logged

An append-only audit log records every broker decision — allowed, denied, pending, hard-blocked — with a timestamp and the actor, newest first. Auditors see every AI action, not just the payments.

Whole threats removed, not managed

Bastios can't run outside programs or commands — so the most common way attackers take over a computer simply doesn't exist here. It isn't reachable from the open internet, and it can't install anything from an app store. It runs only the specific tools you've reviewed and approved — nothing else can get in.

16/16 guardrail tests passing
0 bypass paths in the code
4 broker verdicts, one gate
Drives the real broker, policy & audit log — not mocks Independently re-run & probed for bypasses Sandboxed execution. Egress locked. Default-deny. Fail-closed.

The honest posture: security through ownership, containment, and transparency — not a promise of invulnerability. An independent reviewer (a separate AI agent, not the builder) re-ran the 16-test suite, wrote probe attacks, and confirmed one enforcement point with no bypass and fail-closed throughout.

Modules / Software

One assistant. A library of modules.

Modules are the software add-ons you attach to the platform — each one runs a slice of your operation. The Executive Assistant is included in every package as the core engine; your package decides how many modules you bolt on around it — one, two, or all of them. New modules arrive over time, and Stay Current keeps the ones you own up to date.

Core · included in every package

Executive Assistant

Your AI chief of staff — the engine every package ships with.

  • Daily briefing: calendar, priority email, overdue tasks
  • Inbox triage into clear categories
  • Drafts replies for your approval — never auto-sends
  • One-page meeting briefs & action items from transcripts
  • Summarizes contracts, flagging auto-renewals & change-of-control

Books on Autopilot

Automated bookkeeping you own — no vendor lock-in.

  • Bank/card activity → categorized double-entry ledger
  • Plain-text books you keep forever
  • Reconciliation, close checklist & sign-off step

Finance & Cash

Get paid — an escalating collections engine.

  • AR ladder: reminder → AI call → demand letter, each one you approve
  • 13-week cash forecast with low-week alerts
  • Reads your books — never moves money on its own

People & Knowledge

Your company brain, searchable and self-serve.

  • New hires self-serve from a searchable knowledge base
  • SOPs build up from recordings
  • Pulse surveys surface retention risk early

Estimate Builder

Win the job — estimates that learn your pricebook.

  • Drafts good / better / best from your won-estimate history
  • Margin floor blocks any tier below your minimum
  • E-sign send — only on your approval

Marketing Manager

Reputation & demand — in your voice.

  • Turns every finished job into a review request
  • Drafts on-brand responses & content for your approval
  • Read-only ad scoreboard — which dollar books a call

Front Desk

Never miss a call — or a customer.

  • 24/7 AI receptionist answers, qualifies & books
  • Missed-call-to-text recovery
  • Outbound callbacks with spoken AI disclosure
Starter +1 · Gold +2 · Platinum all of them

Your package sets how much of the library you switch on — the Executive Assistant comes with all of them.

See the packages → Book a demo
Packages

Pick your package.
Pick your modules.

Every package ships with the Executive Assistant core. You choose how many modules you bolt on — and how hands-on you want us to be at onboarding. These are high-touch B2B engagements, so packages are quoted to your operation.

Starter

Get the assistant running on your own box — at your own pace.

Custom quote one-time engagement
Book a demo →
  • Executive Assistant core
  • 1 module of your choice (from 6 add-ons)
  • Mac mini included
  • Configured for 2 users — additional users at an added fee
  • Self-guided connecting — your Mac mini arrives fully set up by us; link your connectors with step-by-step instructions and videos.
Most popular
Gold

Our recommended tier — we set it up with you, then hand you the keys.

Custom quote one-time engagement
Book a demo →
  • Executive Assistant core
  • 2 modules of your choice (from 6 add-ons)
  • Mac mini included
  • Configured for 4 users — additional users at an added fee
  • Remote white-glove onboarding — your Mac mini arrives fully set up; a live specialist walks you through every connector, then a guided handoff + training.
Platinum

The full platform, connected on-site and wired into your stack.

Custom quote one-time engagement
Book a demo →
  • Executive Assistant core
  • All modules included (every add-on)
  • Mac mini (or better) included
  • Configured for 8 users — additional users at an added fee
  • In-person onboarding — your Mac mini arrives fully set up; we come on-site to connect everything, verify it, and train your team.
Custom

Everything in Platinum — plus a tool built around your workflow.

Let’s talk consulting-grade engagement
Talk to us →
  • Everything in Platinum — EA core + all modules
  • A custom-built tool — a bespoke module designed around your operation
  • Mac mini (or better) included
  • Configured for as many users as you need — scaled to your operation
  • White-glove, consulting-grade build & onboarding, end to end.
Optional · recurring

Keep it sharp with an add-on subscription

Your package is a one-time engagement. These two subscriptions are optional — add either one to keep Bastios current (or to skip running the hardware yourself).

Stay Current Custom quote

For clients running their own Mac mini

  • New module capabilities as they ship
  • Model improvements & state-of-the-art updates
  • Reliability updates — the system you bought keeps getting better
  • You run it on your own Mac mini
Hosting + Stay Current Custom quote

For clients who’d rather not run the box

  • We host the box — no Mac mini for you to run or maintain
  • Everything in Stay Current — capabilities, models, reliability
  • Updates handled for you — nothing to install

You own the box, and your data stays on it. No per-transaction fees, no lock-in — your audit ledger is yours, forever. The subscriptions above are optional; cancel one and the system you bought keeps running on your hardware.

Getting started

Live on hardware you own —
in days, not quarters.

No servers to stand up, no data to migrate to someone else's cloud — and nothing to install, ever. Pick a package, we build your Mac mini and mail it ready to go, you connect only what you approve, and go live with every action queued for a human.

  1. 01

    Pick your package & modules

    Choose Starter, Gold, or Platinum, then the business modules you want switched on. Add more later — nothing's locked.

  2. 02

    We build your box & mail it

    Every package, same treatment: we physically set up your Mac mini in-house — Bastios installed, configured, and primed with your business context — then mail it to you ready to plug in. You install nothing.

  3. 03

    Plug it in & connect what you approve

    The only step left: link the connectors you want — Google and the rest — with as much help as your package includes. Permissioned by default; nothing is touched without an explicit grant from you.

  4. 04

    Go live & supervise

    The assistant does the work. Real actions queue for approval, and every move is written to a ledger you keep forever.

How we get you connected

Every box arrives fully set up by us. What scales with your package is the help you get connecting your apps — from instructions and videos to our team on-site.

Starter

Self-guided

Your Mac mini arrives ready to go. Link your connectors with clear step-by-step instructions and videos — at your own pace.

Gold

Remote white-glove

A live specialist on screen with you — walking you through every connector, then a guided handoff plus training for your team.

Platinum

In-person

Platinum and Custom: we come on-site, connect everything, make sure the whole setup is right, and train your team hands-on — in the room with you.

Each tier maps to a package. Custom adds a bespoke tool built for your workflow, delivered consulting-grade. See all packages

Who runs it

Bastios is a product you run and supervise — not a service we operate for you. Bastios does the work; humans keep the controls.

  • You own & supervise the box. It runs on your Mac mini, under your roof and your control.
  • A coordinator works the queue. A designated person reviews the daily approvals and keeps connectors and standing instructions current.
  • Your bookkeeper or CPA signs off. Your existing accountant still reviews and approves the monthly numbers, same as today.
  • Your data & ledger stay yours — forever. Plain-text records, no lock-in. Stop anytime and the box, ledger, and data remain yours.
Why Bastios

The upside of AI —
without giving up your data.

AI is the biggest productivity lever in a generation. Bastios is built to capture it on your terms — on hardware you own, gated by approvals you control, with a receipt for every action. Here's what makes it different, and how big the prize really is.

On your hardware, not their cloud

Financial records, employee info, and customer data stay on a Mac mini you own — by default. Cloud SaaS keeps your data on their servers, under their terms.

vs. cloud: your data on someone else's box

Approval gates are architectural

Spend, send, and call actions are gated at the infrastructure level — the broker — not a checkbox in a settings page. They can't be misconfigured or quietly automated away.

vs. cloud: a toggle a script can flip

A complete audit trail on every action

Not just payments — every read, draft, and send the AI performs is written to a log you keep. Auditors see exactly what happened, when, and who approved it.

vs. cloud: partial logs you can't export

You own your ledger forever

Bookkeeping lives in an open, plain-text double-entry ledger — no proprietary format, no lock-in. Cloud bookkeeping vendors have collapsed and locked customers out of their own records; yours stay readable with or without us.

vs. cloud: records you can be locked out of

Flat license, zero per-transaction fees

One predictable license. No toll booth on every ACH, card swipe, or invoice — unlike AP and payment SaaS that meters you per transaction as you grow.

vs. cloud: a fee on every payment

Built for the PE / lower-middle-market operator

Email triage hard-boosts your sponsor and lender domains. The contract reader flags change-of-control and auto-renewal clauses on sight. Context generic tools simply don't have.

vs. cloud: built for everyone, tuned for no one

Degrades gracefully

If the AI provider is unreachable, Bastios doesn't go dark. Cards still render and core work continues with templated fallbacks — so the box keeps running even when the model doesn't.

vs. cloud: provider down means you're down
The opportunity

The prize is real. Here's the size of it.

Independent research on what AI unlocks across the economy. These are industry findings, not Bastios's own results — the upside Bastios is built to capture, securely.

7.5 hrs Average time saved per week by AI users LSE / Adecco · n≈13,000 (~5+ hrs for half of users)
3 hrs Per week back on email Microsoft Copilot study · n≈6,000
7× More leads qualified when you respond in under an hour HBR / InsideSales · n≈1.25M leads (60× vs. 24 hrs)
~30% Lower customer-service operating cost with AI IBM · 412 enterprises
#1 Ranked value-creation lever by PE executives FTI survey · n≈208 PE execs

Everyone is racing toward AI. The operators who win are the ones who capture the upside without handing over the keys.

Book a demo → Compare packages
Your kernel is waiting

Put AI to work — without
handing over your data.

Talk to our AI right now — tell it the problem you most want solved and it can put you on the waitlist. Prefer typing? Leave your details and we'll reach out.

Our Partners

ElevenLabs Grants ElevenLabs Grants ElevenLabs Grants ElevenLabs Grants ElevenLabs Grants ElevenLabs Grants