HELIOS Hardware: The Sovereign AI Appliance Built for the Air Gap

The buyers who cannot rent compute

There is a class of business for which the public cloud is not an option but a closed door. A defence contractor under ITAR cannot let model weights and prompts traverse infrastructure subject to the US CLOUD Act. An NHS trust handling special-category data under UK GDPR and the DSP Toolkit cannot pipe patient records into a shared tenancy. A bank governed by the PRA's SS2/21 outsourcing rules cannot accept the concentration risk of a single hyperscaler holding its decisioning. Roughly 850,000 UK businesses, around 15 percent of the economy, and close to 5 million across the EU sit behind one or more of these walls. EU AI Act high-risk obligations, the NIS Regulations and EAR export controls only thicken them.

For these firms the question is not which AI to subscribe to. It is how to run AI at all without breaking the law. The answer has to be hardware they own, sited where they choose, and severable from the public internet the moment the mission demands it. That is the problem HELIOS is built to solve.

What HELIOS actually is

HELIOS is the sovereign AI appliance: a self-contained unit that runs the full Mickai operating system on-premises and air-gapped. It is not a thin client phoning home to a datacentre. The models, the inference engine, the retrieval layer, the Greek-named Studios and the audit record all live inside the box. Pull the network cable and it keeps working.

Mickai is the sovereign AI operating system, the SIOS: AI that regulated businesses own and run inside their own walls, with every action written to a tamper-evident, post-quantum-signed audit record we call the OAR. HELIOS is the physical embodiment of that design. The operating system was never built to be a tenant on someone else's machine, so the appliance was always part of the architecture, not an afterthought bolted on for the security-conscious.

This is built and live. The Studios run on it today: Nemesis for fraud and AML, Plutus for finance, Tyche for underwriting, Prometheus for forecasting, Iris for customer service, Nomos for compliance, Astraea for legal, Panacea for clinical work, Pythia for business intelligence and Aletheia for audit. Trust Agent, the AMT marketing system, Vinis voice and OAR-as-a-Service sit alongside them. One appliance, the whole estate, nothing leaving the wall.

Why the air gap changes the economics

When a model runs in the public cloud, three things travel: the prompt, the context and the answer. For a regulated firm, each of those can carry data it is legally forbidden to expose. The usual workaround is redaction, tokenisation and contractual assurance, a stack of mitigations that never quite closes the gap and never satisfies an auditor who asks the simple question, where does the data physically sit.

HELIOS closes the gap by removing the journey. Inference happens on metal the customer controls, in a room the customer controls, under power the customer controls. The OAR signs every action with post-quantum cryptography so the record is built to survive the arrival of quantum decryption, and because the record is generated on the device, the chain of custody is unbroken. For the compliance officer, the answer to where does the data sit becomes a location on a floor plan rather than a clause in a contract.

That is also why owning the hardware layer matters strategically and not just operationally. A firm that rents compute rents its risk posture from whoever owns the silicon. A firm that owns the appliance owns its posture outright. In sectors where the regulator can shut you down, that distinction is the difference between a deployable system and a slide deck.

Birmingham manufacturing

HELIOS is built in the United Kingdom, with Birmingham manufacturing secured. That matters for more than provenance. A sovereign appliance assembled inside a controlled domestic supply chain answers a question the buyers already ask about their other critical kit: who touched this before it reached my server room. For ITAR, EAR and NIS-scoped customers, a UK-built unit with a documented chain of custody is not a marketing line, it is a procurement requirement.

It also anchors the category in something physical. A great deal of the sovereign AI conversation is abstract, all policy and posture. A box on a loading dock, made here, is the part a board can see and a regulator can inspect.

The moat behind the metal

The appliance is the visible layer. Underneath it sits the reason this is hard to copy. Mickai holds 104 filed UK patent applications, around 2,340 claims, filed by Mickai LTD with Micky Irons as inventor. Filed, not granted, which is the point: priority dates and a prior-art moat that competitors have to design around. The IP estate maps to 196 companies and 311 patent-company pairs as potential licensees, names that include Microsoft, AWS, NVIDIA, Google, Adobe and IBM. That is potential-licensee sizing, an indication of where the architecture touches the wider industry rather than a book of signed deals.

The momentum is visible in the public record as well. As of June 2026, Micky Irons ranked number four on Crunchbase, with the Mickai company profile in the top one to two percent globally, a third-party signal that the category is being noticed.

The sovereign AI market is moving from around 40 billion US dollars in 2025 toward 148 billion by 2032. The Studios give Mickai a Year 5 revenue path to billions at high gross margin, and the IP estate plus the dual-buyer thesis underwrite the enterprise value beneath it. Mickai is an ally to the frontier labs, not their adversary: the firms that cannot rent compute were never going to be public-cloud customers, and HELIOS turns that excluded demand into a served market. This is a category a hyperscaler would rationally want to own, because it reaches the buyers their own model cannot legally reach.

Where this goes next

Mickai is a UK company, built and live, building to scale and heading for the top. The appliance exists, the operating system runs on it, the Studios are deployed and the audit record is signing. What comes next is hardening the deployment patterns for finance, defence and health as the sovereign category thickens around them.

The work now is the sector playbooks: how the appliance lands in a bank, a defence supplier, a hospital trust, each with its own controls, its own auditors and its own definition of inside the wall. The architecture is the same. The deployment is where the category gets decided.

If your firm cannot rent compute and has been waiting for AI you can actually own, the conversation starts at micky@mickai.co.uk.

By Micky Irons, founder and CEO of Mickai.

Frequently asked questions

What is the HELIOS appliance?

HELIOS is Mickai's sovereign AI appliance: a self-contained unit that runs the full Mickai operating system on-premises and air-gapped. The models, inference engine, retrieval layer, Studios and the post-quantum-signed audit record all live inside the box, so it keeps working with the network cable pulled. It is built and live.

Why do some firms need air-gapped AI instead of cloud AI?

Roughly 850,000 UK businesses and close to 5 million across the EU are legally restricted from using public-cloud AI by regimes such as PRA SS2/21, UK GDPR special-category rules, the NHS DSP Toolkit, EU AI Act high-risk obligations, ITAR and EAR controls, the NIS Regulations and the US CLOUD Act. For these firms, hardware they own and can sever from the internet is the only compliant way to run AI at all.

What is the OAR?

The OAR is Mickai's tamper-evident, post-quantum-signed audit record. Every action the system takes is written to it, and because the record is generated on the device, the chain of custody is unbroken and built to survive future quantum decryption. For a compliance officer, it turns where does the data sit into a location on a floor plan rather than a clause in a contract.

Where is HELIOS manufactured?

HELIOS is built in the United Kingdom, with Birmingham manufacturing secured. A sovereign appliance assembled inside a controlled domestic supply chain gives ITAR, EAR and NIS-scoped buyers a documented chain of custody, which for those customers is a procurement requirement rather than a marketing point.

How does Mickai relate to the large AI labs?

Mickai is an ally to the frontier labs, not their adversary. The regulated firms that cannot rent compute were never going to be public-cloud customers, so HELIOS serves demand the hyperscalers cannot legally reach. As of June 2026, Micky Irons ranked number four on Crunchbase, an external signal that the sovereign category is being noticed.