Data sovereignty — 80% of AI work never leaves the machine.
Local Ollama first. Escalation to a frontier API is opt-in per routine and logged with the exact prompt hash.
route = "ollama" · forces local-onlyThe agentic OS with guardrails built in.
Local models by default. Sandboxed tools. Auditable ledger. Predictable cost. Sovereign. On-prem. Compares against Copilot Enterprise ($40/seat/mo, unpredictable): vinOS routes ~80% of calls to a local model and hard-caps escalated spend per-user per-day.
Three outcomes procurement can measure.
Sovereignty, predictability, auditability. Each backed by a runtime primitive — not a policy PDF.
Cost predictability — hard-capped at the runtime.
Per-run and per-day dollar limits declared in each routine. Exceed a cap and the routine skips, degrades, or falls back to local — enforced by the loader, not the model.
max_dollars_per_day · on_exceed: skipAuditable — every run in a queryable ledger.
Routines are TOML in git. Every run appends to a per-user SQLite ledger: routine, model, tokens, tool calls, cost, exit code.
~/.vinos/ledger.db · sqlite3Where vinOS sits in the market.
Honest comparison. Unpublished figures are marked as such — we don't invent numbers we can't cite.
| vinOS | Copilot Enterprise | Cursor Enterprise | ChatGPT Team | |
|---|---|---|---|---|
| Cost model | Free ISO + your own API keys. ~80% local (free). | $40/seat/month, unpredictable overages | $40/seat/month + inference passthrough | $30/seat/month, cap by plan |
| Data sovereignty | Local-first. Frontier only on explicit escalate. | Prompts to OpenAI / Microsoft servers | Prompts to Anthropic / OpenAI servers | Prompts to OpenAI servers |
| Deploy target | Bare metal · VM · Docker · K8s (v2.1) | SaaS only | SaaS only | SaaS only |
| Audit log | Per-user SQLite · routine · model · tokens · cost · tools | Admin console · unpublished schema | Admin console · unpublished schema | Admin console · unpublished schema |
| Sandbox model | bwrap per tool call · explicit fs + net allowlist | Not applicable (SaaS) | Not applicable (SaaS) | Not applicable (SaaS) |
| License | MIT (distribution) · GPL/permissive (components) | Commercial EULA | Commercial EULA | Commercial EULA |
| Per-seat lock-in | None. pacman -Rns vinos-* to remove. | Annual per-seat commit | Annual per-seat commit | Monthly per-seat |
Pricing pulled from public sources on the launch date of this page. Corrections welcome via GitHub Issues.
Questions procurement asks.
SOC 2 / ISO 27001?
On the roadmap. The primitives auditors care about — immutable
run ledger, per-tool sandbox, explicit network egress list,
deterministic routing decisions — exist in v2.0.5 and are
documented in /spec/. Formal attestation
pending an enterprise-tier customer sponsoring the audit.
GDPR / data residency?
Local-first is by-design GDPR-compliant for most use cases —
prompts and outputs stay on the endpoint, no cross-border
transfer. When a routine escalates to a frontier API, the
provider's Data Processing Agreement applies (Anthropic and
OpenAI both offer EU-residency options). Escalation is explicit
and logged.
Air-gap support?
Yes. Set
route = "ollama" at the RoutineSet
defaults level and no routine can escalate off-box.
The installer supports offline install from a mirrored USB;
Ollama models pre-pulled to /var/lib/ollama during
image build.SSO / LDAP / SCIM?
vinOS inherits Arch's auth surface — SSSD, realmd, LDAP,
Kerberos, and PAM modules install from AUR/extras (not
pre-installed in the base ISO — pull them via
pacman -S or a post-install profile). Per-user
routine ledgers are already per-$UID. SCIM
provisioning is not vinOS's layer — handle it at your identity
provider.Support / SLA?
Community support via GitHub Discussions
today. Enterprise tier with named-contact SLA + private
vulnerability disclosure is planned — contact
vinpatel.pro@gmail.com
directly if you need a quote before the tier is public.
Compliance packet for our security review?
In progress. Today: architecture diagram, threat model, and
audit-log extraction docs are in /docs/.
A packaged Trust Center (SBOM, signed release binaries,
supply-chain provenance) is on the v2.1 roadmap alongside the
Cloud runtime.
Pilot it on one team.
Free to try — the ISO is the full distribution. Uninstall in one command if it doesn't fit.
Uninstall:
pacman -Rns vinos-*. No lock-in. MIT-licensed.