Data that cannot leave
Acts, resolutions, regulations: public but sensitive data that cannot end up on extra-EU clouds.
Public Administration
On-premise AI for municipalities, provinces and regions.
Municipalities, provinces, regions, healthcare authorities and chambers of commerce that want to bring AI inside the organisation without letting data leave. noze installs dedicated workstations and open models, purchasable via Italian public procurement (MePA / Consip). Healthcare authorities and hospitals with clinical needs have a dedicated Healthcare page.
Your challenges
Procurement constraints
Complex procurement, long timelines, vendor pool limited to the public catalogue.
Limited technical staff
Few IT resources, almost no AI training, urgent need to simplify operators’ work.
Cross-cutting compliance
GDPR + procurement law + AI Act + ANAC guidelines, all to be governed together.
How we can help
Product
Product
Product
Product
Solution
Solution
ProductIntelliPA
Dedicated AI workstation, RAG over the organisation's rules, MePA-purchasable.
ProductDataGovern
GDPR, procurement law, AI Act and ANAC guidelines in one on-premise platform.
ProductCyberAgent
Vulnerability assessment and automated pentest for the organisation's network.
ProductAdmina Enterprise
Open AI governance with Admina Enterprise: AI Act and NIS2, on-premise.
SolutionCybersecurity
Security assessment and NIS2 compliance for public bodies.
SolutionArtificial Intelligence
Self-hosted AI strategy, training and governance.
Insights
Agent harness and sandbox: TrueForge and smolvm
TrueForge is an open-source harness in TypeScript holding the execution loop, MCP tools, approvals and secrets. smolvm is a Rust CLI booting microVMs with a separate guest kernel on libkrun, with an egress allowlist in the configuration file. Underneath sit five different isolation levels, from a syscall filter to a VM, and each stops different things.
GLM-5.3: new post-training and cyber benchmarks
Z.ai announced GLM-5.3 on 14 August, stating it starts from the same base model as GLM-5.2 and that every gain comes from post-training. The weights are not out yet. On CyberGym and ExploitGym the benchmarks measure something other than finding a vulnerability, and the CyberGym paper reports 759 raw crashes for 9 confirmed zero-days after manual triage.
DeepSeek Harness: plugins, core and capability seams
DeepSeek opened the Harness repository on 13 August, a TypeScript agent runtime under the MIT licence, built on Cordis. The documentation publishes a table declaring the role of each of its 56 service rows, 26 of which are extension points. The agent loop is a row in a configuration file, and the actions allowed on an existing row are six, named in the interface.
Frequently asked questions
How can a municipality use AI without letting data leave?
IntelliPA is a dedicated AI workstation installed inside the organisation: open-weight models run on-premise and RAG works over the organisation's rules, so acts and resolutions never leave the infrastructure or land on extra-EU clouds. noze's self-hosted AI strategy supports operators through adoption.
Can an on-premise AI solution be purchased through MePA / Consip?
IntelliPA is purchasable via MePA, keeping the organisation within public procurement procedures with no off-catalogue vendors. The workstation arrives preconfigured with open-weight models and RAG over the organisation's documents.
How do you govern GDPR, procurement law and the AI Act together in a public body?
DataGovern brings GDPR, procurement law, the AI Act and ANAC guidelines into one on-premise platform, so cross-cutting compliance is handled from a single place. Admina Enterprise adds open AI governance for the AI Act and NIS2, always inside the organisation.