Install from a single file
Ready containers, or a container-free option for policies that forbid them. No internet access needed.
Air-gap mode
On-premise AI call center: air-gapped and running on Astra Linux
For banks, healthcare, the public sector and anyone who cannot send call recordings outside. Calls, transcripts and AI answers stay with you.
Already a customer? Log in
Updated
- Runs on Astra Linux SE 1.8
- Local language model
- Offline install
Can an AI call center run on your own servers?
Yes, Leksta has a separate on-premise edition for your own servers. Transcription, call analysis, the knowledge base and the language model run inside your network, and in air-gap mode the product never reaches the public internet. The edition has been validated on test machines, including Astra Linux SE 1.8, and is offered as a pilot.
- 0outbound connections in air-gap modeNetwork capture on the air-gapped test stand: no packet left the allowed set.
- 100%of calls scored by AIEvery recorded conversation is transcribed and checked against your scorecard; no sampling.
The same console, inside your network
The on-premise edition runs the same console: call log, transcripts, scorecard checks and Ask your calls. What changes is where the computing happens. Speech recognition and the language model run on your servers, so conversation text never goes to cloud AI services.
- The recording → transcript → analysis chain is validated on clean servers
- The language model and knowledge base search run locally
- Phone numbers, emails and card numbers are masked before text is stored
- Your admin sets retention for recordings and transcripts
Air-gap mode: the product guards the perimeter itself
In air-gap mode the product checks its settings at startup and refuses to start if any address is public. Cloud AI, cloud PBX polling and outbound webhooks are switched off, and integrations may only target addresses in your private network.
- Validated by network capture on an isolated test machine: zero external packets
- Every connection to an external system re-checks the address
- The voice bot can run without the cloud: recognition, reply and speech synthesis locally
- A SIP call inside a fully closed network has not been validated yet; we test it in the pilot
What the on-premise edition includes
Astra Linux SE 1.8
Install, recording and transcription of a real call validated on test machines, including closed software environment mode.
One-command backup
Databases, recordings and settings archived with a checksum. A damaged archive is rejected on restore.
Offline upgrade with rollback
A failed upgrade rolls back automatically and work continues on the previous version.
Corporate sign-in
OIDC and Active Directory sign-in: the directory group sets the role. Validated on a test directory.
Local monitoring
Dashboards, alerts and log search inside the perimeter. The support bundle excludes passwords, phone numbers and transcripts.
Hardened setup
Services without extra privileges, configuration checked against CIS benchmarks, key rotation with one script.
Audit log
Who changed what: PBX, knowledge base, access keys, roles and privacy settings.
Who an on-premise install is for
Financial organisations
Problem. Customer call recordings cannot go to external cloud services.
What the AI does. Call transcription and scoring run on the bank's servers, with integrations limited to the internal network.
Outcome. Quality control on every call without data leaving the perimeter.
Healthcare
Problem. Patient conversations contain sensitive information.
What the AI does. Local install, personal data masking and retention set by the clinic.
Outcome. Managers see booking call quality while patient data stays in the clinic.
Public sector and industry
Problem. A domestic OS and offline operation are required.
What the AI does. Install on Astra Linux SE 1.8 from an offline package, air-gap mode with no outbound traffic.
Outcome. AI analytics can be trialled in a pilot on an isolated network.
How an on-premise pilot works
The edition is not yet in production use at customers, so we start with a pilot on your test environment.
Gather requirements
OS, container policy, network restrictions, call volume and whether you need a local language model.
Size the servers
Speech recognition is the main cost. We size for your volume and mode: overnight batch or real-time transcription.
Install offline
We install from a single file on your test server and connect the PBX over SIP inside the network.
Verify air-gap mode
Together with your security team we run a network capture and confirm no traffic leaves the network.
Review the results
We compare transcription and analysis quality on your recordings and agree on the next stage.
On-premise FAQ
Can it run without internet access?
Yes. In air-gap mode the product never reaches the public network and will not start if a public address appears in its settings. This was validated by network capture on an isolated test machine.
What is an air gap?
An air gap is a closed network that is physically or logically separated from the internet. Every component, AI included, runs inside it, and data never leaves the organisation's network.
Does it run on Astra Linux?
Yes, it runs on Astra Linux SE 1.8. Install, upgrade, rollback and transcription of a real call were validated on clean test machines. We validate a specific customer image as part of the pilot.
Has the product passed a formal FSTEC or OAC assessment?
No. We state only what has been validated: the product runs on Astra Linux SE 1.8 and its hardening follows CIS recommendations. We work through your security team's requirements in the pilot.
What hardware is needed?
It depends on the number of agents and the transcription mode: overnight batch or real time. A local language model needs a server with a GPU and enough memory. We size it for your volume during the pilot.
Does the local model work as well as the cloud one?
Not entirely. Call classification matches the cloud, while goal detection is less accurate locally for now. That is why the pilot compares results on your own recordings.
Is the edition used by real customers?
Not yet: it has been validated on isolated test machines and the install archives are not signed yet. We offer a pilot on your test environment.
How do you upgrade an air-gapped system?
An upgrade arrives as a single offline file. A backup is taken first, and if the upgrade fails the system returns to the previous version automatically.
Let's discuss your environment
Tell us your security requirements and we will outline a pilot on your servers.