Leksta
Air-gap mode

On-premise AI call center: air-gapped and running on Astra Linux

For banks, healthcare, the public sector and anyone who keeps call recordings inside the company. Calls, transcripts and AI scores stay with you.

Already a customer? Log in

  • Runs on Astra Linux SE 1.8
  • Local language model
  • Offline install

Can an AI call center run on your own servers?

Yes, Leksta has a separate on-premise edition for your own servers. Transcription, call analysis, the knowledge base and the language model run inside your network, and in air-gap mode the product never reaches the public internet. The edition has been validated on test machines, including Astra Linux SE 1.8, and is offered as a pilot.

  • 0outbound connections in air-gap modeNetwork capture on the air-gapped test stand: no packet left the allowed set.
  • 100%of calls scored by AIEvery recorded conversation is transcribed and checked against your scorecard; no sampling.

The same console, inside your network

The on-premise edition runs the same console: call log, transcripts, scorecard checks and Ask your calls. What changes is where the computing happens. Speech recognition and the language model run on your servers, so conversation text never goes to cloud AI services.

  • The recording → transcript → analysis chain is validated on clean servers
  • The language model and knowledge base search run locally
  • Phone numbers, emails and card numbers are masked before text is stored
  • Your admin sets retention for recordings and transcripts
Call details page: audio player with per-speaker waveform, AI score, call info and tabs for transcript, AI analysis and manual review
Call view in the console: transcript and score with no data leaving the network

Air-gap mode: the product guards the perimeter itself

In air-gap mode the product checks its settings at startup and starts only when every address in them is private. Cloud AI, cloud PBX polling and outbound webhooks are switched off, and integrations target only addresses in your private network.

  • Validated by network capture on an isolated test machine: zero external packets
  • Every connection to an external system re-checks the address
  • The voice AI bot is coming to Leksta: get demo access and we will discuss how it will run in your network
  • We validate a SIP call inside a fully closed network together with you in the pilot
Call analytics: KPIs, a heat map of load by day and hour and a breakdown by source
The speech analytics dashboard that runs inside your own perimeter

What the on-premise edition includes

Install from a single file

Ready containers, or a container-free option for policies that forbid them. No internet access needed.

Astra Linux SE 1.8

Install, recording and transcription of a real call validated on test machines, including closed software environment mode.

One-command backup

Databases, recordings and settings archived with a checksum. The system checks archive integrity before every restore.

Offline upgrade with rollback

A failed upgrade rolls back automatically and work continues on the previous version.

Corporate sign-in

OIDC and Active Directory sign-in: the directory group sets the role. Validated on a test directory.

Local monitoring

Dashboards, alerts and log search inside the perimeter. The support bundle excludes passwords, phone numbers and transcripts.

Hardened setup

Services without extra privileges, configuration checked against CIS benchmarks, key rotation with one script.

Audit log

Who changed what: PBX, knowledge base, access keys, roles and privacy settings.

Call analysis without the cloud

Speech recognition and call analysis run on your own servers: data does not leave to external AI services. The voice AI bot is coming to Leksta: get demo access.

Who an on-premise install is for

Financial organisations

Problem. Customer call recordings must stay inside the bank, away from external cloud services.

What the AI does. Call transcription and scoring run on the bank's servers, with integrations limited to the internal network.

Outcome. Quality control on every call without data leaving the perimeter.

Healthcare

Problem. Patient conversations contain sensitive information.

What the AI does. Local install, personal data masking and retention set by the clinic.

Outcome. Managers see booking call quality while patient data stays in the clinic.

Public sector and industry

Problem. A domestic OS and offline operation are required.

What the AI does. Install on Astra Linux SE 1.8 from an offline package, air-gap mode with no outbound traffic.

Outcome. AI analytics can be trialled in a pilot on an isolated network.

How an on-premise pilot works

We start with a pilot on your test environment: we check the install, the closed mode and analysis quality on your recordings.

  1. Gather requirements

    OS, container policy, network restrictions, call volume and whether you need a local language model.

  2. Size the servers

    Speech recognition is the main cost. We size for your volume and mode: overnight batch or real-time transcription.

  3. Install offline

    We install from a single file on your test server and connect the PBX over SIP inside the network.

  4. Verify air-gap mode

    Together with your security team we run a network capture and confirm no traffic leaves the network.

  5. Review the results

    We compare transcription and analysis quality on your recordings and agree on the next stage.

On-premise FAQ

Can I install speech analytics on my own server?

Yes. The Leksta on-premise edition installs on your servers from a single file, without internet access. Transcription, checklist scoring, the knowledge base and the language model run inside your network, and recordings and transcripts never leave it. We start with a pilot on your test environment and check quality on your own recordings.

What is an air gap and why does a contact center need it?

An air gap is a closed network that is physically or logically separated from the internet. Every component, AI included, runs inside it, and call recordings never leave the organisation's network. For a bank, clinic or public-sector contact center, it is a way to analyse every call and keep data under full control of its own security team.

What servers does on-premise speech analytics need?

It depends on call volume and the transcription mode: overnight batch or real time. Speech recognition is the main cost driver. A local language model needs a server with a GPU and enough memory. We size the hardware for your volume during the pilot, so you do not overpay for equipment.

Does the system run on Astra Linux?

Yes, Leksta runs on Astra Linux SE 1.8. Install, upgrade, rollback and transcription of a real call were validated on clean test machines, including the closed software environment mode. Hardening follows CIS recommendations. We validate your company's own image together with your security team during the pilot.

How do you upgrade an air-gapped system?

An upgrade arrives as a single file and installs without internet access. The system takes a backup first, and if anything goes wrong it returns to the previous version automatically, so work continues. You can also back up databases, recordings and settings manually with one command — the archive is verified by a checksum.

Let's discuss your environment

Tell us your security requirements and we will outline a pilot on your servers.

Request a demo
Check my calls