# OnPrem Cedar: Workstation AI PC · built to order

> OnPrem World · https://onpremworld.com/en/pc/cedar · Last updated: 2026-10-22

**Your own AI, built to order. Your data never leaves the room.**

A private AI on a workstation built for you, trained on your files, installed in your office.

From US$102,100 (before local taxes, freight and travel) · NT$3,300,000 (ex-VAT, quoted to your design)

- Your data: Stays in the room
- Your model: Trained on your files
- Delivery: Installed on site in about 8 weeks

## Who it is for

Pick your field and follow the three steps.

### Family office

- Your files go in: Trusts and succession, Holdings, Family records
- Who may ask: Principal, Family members, CFO
- If we move the holding company to Singapore, what changes for the trust? → Two things: where distributions are paid from, and the protector’s written consent. (From: Trust deed (2019))

### Private clients

- Your files go in: Assets, Insurance and health, Correspondence
- Who may ask: You, Personal assistant, Advisers
- Which insurance policies renew next month? → Three: home, art collection and the yacht. Renewal notes are attached. (From: Insurance folder)

### Law firms

- Your files go in: Client matters, Contracts, Precedents
- Who may ask: Partners, Associates, Paralegals
- Find every NDA with a penalty over EUR 100,000. → Four, each with the clause and page. (From: Contracts)

### Wealth management

- Your files go in: Client portfolios, KYC files, Research
- Who may ask: Bankers, Compliance, Analysts
- Which clients hold more than 20% in a single stock? → Seven, listed with their risk profile and last review date. (From: Client portfolios)

### Clinics

- Your files go in: Patient records, Care protocols, Billing
- Who may ask: Doctors, Nurses, Front desk
- Summarise this patient’s last three visits. → Done, in date order, with each visit’s notes and prescriptions. (From: Patient records)

### Accounting and advisory

- Your files go in: Client books, Tax filings, Engagement letters
- Who may ask: Partners, Managers, Staff
- Which clients have filings due this month? → Twelve, sorted by deadline, with the missing documents flagged. (From: Tax filings)

Cloud AI stays outside unless you allow it

Five things stay yours, by design. Your data · Your models · Your training · Your rules · Your keys

## Assembled from the blocks you need

Every Cedar is put together for one client: the hardware, the models, how knowledge is kept apart, who may reach it, what may connect, and what your people use. Choose a starting point; we settle the details with you in the design weeks.

### Hardware: The workstation, sized to your people and models

- Cedar 192: 2× RTX PRO 6000 · 192 GB
- Cedar 384: 4× RTX PRO 6000 · 384 GB
- Rack-mount chassis: For a server room instead of an office
- UPS and surge protection: Shuts down cleanly in a power cut
- Offline network kit: Runs with no internet at all

### Models: Open models that run on the machine

- Private large model: 120B class, for writing and analysis
- Fast everyday model: Quick answers for everyone
- Your own trained model: Learns your terms and your way of working
- Coding model: Writes your internal tools
- Speech to text: Meetings and calls into text
- Document reading: Scans and photographed pages

### Knowledge: Your files, kept apart by subject

- Separate knowledge vaults: One per subject, each with its own rules
- Sealed · private · shared: How far each vault may travel
- Encryption per vault: Keys created and held by you
- File server sync: Picks up new files from your shares
- Email archive: Past correspondence, searchable
- Version history: Every change kept

### Permissions: Who may know what, and who may add to it

- Roles and departments: Mirrors how your office works
- Read or save, per vault: Who may see, who may add
- Models per role: Who may use which model
- Single sign-on: Microsoft, Google, OIDC, Keycloak
- Outside advisers: Only the vaults their matter needs
- Audit log: Every change on record; prompts never logged

### Connections: Local first; the cloud only where you allow it

- Local only: The default: nothing leaves the room
- Cloud models for shared files: Claude, GPT or Gemini, through the outbound guard
- LINE, WhatsApp, Teams: Ask from the apps you already use
- Private API: For your own systems
- Access from your phone: Through your own VPN

### Applications: What your people actually use every day

- Knowledge Q&A: Answers with sources, by role
- Department agents: HR, finance, legal, compliance
- Agent teams: Several agents on one task, one coordinator
- Overnight training: Your model improves while the office sleeps
- Consultant room: AI advisers weigh a decision together
- Tool builder: Internal tools written for you
- Content studio: Writing and pictures, from OnPrem Bloom

## Ask your own knowledge, from LINE, WhatsApp, Teams or the web

Every answer names the document it came from. Each person reaches only the vaults their role allows, and an answer that isn’t in the knowledge base says so.

- Executive assistant: Can staff fly business class to Tokyo? → No. Business class is for flights over six hours, and Tokyo is about three. See the Office handbook, travel section. (Source shown)
- Family member: How much of my allowance is left this year? → NT$420,000 is left for 2026. Only your own line was read. (Private · your own record only)
- Outside adviser: Show me last year’s trust distributions. → I can’t share that: trust records are for the principal and the CFO only. The request has been logged. (Sealed · no access · logged)

## It knows who may know what

Knowledge sits in vaults, and each vault sits in a tier: sealed, private or shared. Every role is given read or save on each vault, and only the models you allow. Pick a role and ask as them.

- **Sealed:** Named people only · local models only
- **Private:** By role · local models only
- **Shared:** By role · cloud models allowed

Knowledge vaults: Trusts and succession (Sealed), Investments (Private), Legal matters (Private), Household and staff (Private), Research and markets (Shared)

### Principal

- Trusts and succession: Read and save; Investments: Read and save; Legal matters: Read and save; Household and staff: Read and save; Research and markets: Read and save
- Models this role may use: Private large model · on Cedar, Fast model · on Cedar, Cloud model · shared files only
- If we move the holding company to Singapore, what changes for the children’s trust? → Two things. Distributions would be paid from Singapore, and the deed asks for the protector’s written consent before any change of residence. (From: Family trust deed (2019) · Holding structure memo (2026))

### Family member

- Trusts and succession: No access; Investments: Read; Legal matters: No access; Household and staff: Read; Research and markets: Read and save
- Models this role may use: Private large model · on Cedar, Fast model · on Cedar
- What does the trust deed say about my share? → That is in Trusts and succession, which your role can’t open. I’ve noted your request for the principal. (Refused and logged)

### Chief financial officer

- Trusts and succession: Read; Investments: Read and save; Legal matters: Read; Household and staff: No access; Research and markets: Read and save
- Models this role may use: Private large model · on Cedar, Fast model · on Cedar, Cloud model · shared files only
- Which holdings are due for review this quarter? → Four: two bond funds maturing in March, the Taipei property lease and the private-credit fund’s annual report. (From: Holdings register · Review calendar)

### Executive assistant

- Trusts and succession: No access; Investments: No access; Legal matters: No access; Household and staff: Read and save; Research and markets: Read
- Models this role may use: Fast model · on Cedar
- When is the housekeeper’s contract up for renewal? → 31 January. The contract asks for a month’s notice, so decide by 31 December. (From: Staff contracts)

### Outside counsel

- Trusts and succession: Read; Investments: No access; Legal matters: Read and save; Household and staff: No access; Research and markets: No access
- Models this role may use: Private large model · on Cedar
- Draft the letter to the bank about the new account mandate. → The draft is ready and saved to Legal matters. It follows the signing rules in the 2024 board resolution. (From: Board resolution (2024))
- Cloud models are off for this role.

Example. Names and documents are illustrative.

## The system you will use: Canopy

Canopy is our own management system for local AI: agents, knowledge, models, people and permissions in one place. These are real screens, shown with a demo company.

- **Answers with sources:** An HR agent answers from the people handbook and names the documents it used.
- **It shows its work:** Every step is visible: which knowledge base it opened and which pages it read.
- **GDPR questions:** A compliance agent walks through an erasure request and flags what the law says to keep.
- **Agent teams:** A bid manager, a pricing analyst and a legal reviewer work on one tender; a coordinator merges their parts.
- **Permissions:** Per agent: who may use or edit it, share its topics, or switch its model; grants by department or person.
- **Audit log:** Every permission change and new file on record, exportable. Prompts and passwords are never logged.

Also in Canopy: single sign-on (Microsoft, Google, OIDC, Keycloak), usage by person and day, and the choice of local or cloud model per agent.

## From the first conversation to installation

About eight weeks, set mostly by how long the graphics cards and workstation parts take to arrive. Your data enters only at the end, on your own premises.

- **Week 0 · Private consultation:** A non-disclosure agreement first, then your needs, in person or by video.
- **Weeks 1–2 · Design:** People, roles, vaults and models mapped with you. We see categories, never your files. A written design and quote.
- **Weeks 2–6 · Sourcing and build:** Parts ordered for your configuration, assembled, 72 hours of burn-in, models and permission rules installed.
- **Week 7 · Acceptance in our lab:** Tested against the agreed checklist, without any of your data. You receive the report.
- **Week 8 · Installed on site:** Our engineers install it on your premises, on your network or fully offline. You create the keys; your files go in on site; first training and a handover.
- **After · After installation:** Updates arrive as signed packages you install. Remote help only when you open the door, for a set time, on record.

Outside Taiwan our engineers travel to install it too; travel is quoted separately.

## Two configurations to start from

Both are high-performance workstations with professional graphics cards. Everything else is set in your design.

### OnPrem Cedar 192 · Family offices and private clients

2× NVIDIA RTX PRO 6000 · 192 GB

- From US$102,100 (before local taxes, freight and travel) · NT$3,300,000 (ex-VAT, quoted to your design)
- About 80 people at once
- A 120B-class private model for everyone, plus a second model
- Trains your own model up to 120B
- Graphics: 2× NVIDIA RTX PRO 6000 Blackwell Max-Q, 192 GB (ECC)
- Platform: AMD Threadripper PRO workstation, 512 GB ECC memory
- Storage: NVMe system drive and mirrored data drives, encrypted per vault
- Chassis: Workstation tower, 1600 W
- Software: Canopy with the modules in your design; your own trained model

### OnPrem Cedar 384 · Firms and groups

4× NVIDIA RTX PRO 6000 · 384 GB

- Quoted to your design
- About 200 people at once
- Trains on two cards while two keep answering
- Room for 235B-class open models
- Graphics: 4× NVIDIA RTX PRO 6000 Blackwell Max-Q, 384 GB (ECC)
- Platform: AMD Threadripper PRO workstation, 512 GB ECC memory (up to 1 TB)
- Storage: NVMe system drive and a redundant data array, encrypted per vault
- Chassis: Tower or rack, dual 1600 W
- Software: Canopy with the modules in your design; your own trained model

Final specification and price follow your design.

### Every quote includes

- Design with you, in writing
- Build, 72-hour burn-in and acceptance test
- Installation on site by our engineers
- First training of your model and a handover session

## Confidentiality, in practice

- **Before we talk:** A non-disclosure agreement is signed before the first detailed conversation.
- **Designed from categories:** We design from what kinds of documents you hold, not from the documents themselves.
- **Built without your data:** The machine is built and tested in our lab with none of your files. They go in on site.
- **Your keys:** You create the encryption keys at installation. We keep none.
- **Offline if you wish:** Cedar can run with no internet at all. Cloud models stay off unless you allow them, and then see only shared files, through the outbound guard.
- **On record:** Sign-ins, permission changes and new files are logged; prompts and passwords never are.
- **Help on your terms:** Remote support happens only when you open the door, for a set time, and it is logged.
- **Erasure:** Delete a file from its vault, and roll your trained model back to a version trained before it was added.

Cedar is designed for clients who take GDPR seriously: data stays on your premises, access is by role and on record, and erasure is supported. Compliance itself depends on your own processes; the written design describes where data is kept and who can reach it, for your records.

## Frequently asked questions

### Can OnPrem World see our data?

No. The machine is built and tested without your files, they are loaded on your premises, you create and hold the keys, and remote help only happens when you open the door, for a set time, on record.

### Can it run without the internet?

Yes. Cedar can run fully offline. Updates then arrive as signed packages that you install.

### Can we still use Claude or GPT?

If you allow it: only for the roles you choose, only on files in the shared tier, and only through the outbound guard, which stops anything from a sealed or private vault from leaving.

### What happens when someone leaves?

Remove their account or role and their access ends at once; the audit log keeps the history. With single sign-on, removing them from your directory is enough.

### Why does it take about eight weeks?

The graphics cards and workstation parts are ordered for your configuration, then the machine is assembled, burned in for 72 hours and tested before we install it.

### Do you install outside Taiwan?

Yes. Our engineers travel to install it, as they do in Taiwan; travel is quoted separately.

### What does the price include?

The workstation, the design, the build and acceptance test, installation on site and the first training of your model. Quotes start from NT$3,300,000 ex-VAT and follow your design.

### Does Cedar make us GDPR compliant?

It helps, but compliance depends on your processes. Cedar keeps data on your premises, controls access by role, logs it, and supports erasure; the written design documents where data lives and who can reach it.

Request a private consultation: https://onpremworld.com/en/quote?plan=cedar