# Sondy

We are building the agentic desktop workplace for everyone whose control over agents and data is mission-critical.

Made in Europe. First release planned for 2027. See what is coming, and be part of it from the start.

## For teams and topics that are too confidential for today's AI tools.

Across Europe, office workers with strictly confidential work get limited or no access to AI. Sondy is being built to give them the agentic experience they otherwise know only from their private machines.

### Private sector

Examples: Critical infrastructure, Regulated research, Hospitals and clinical research, Defence and space, Law and audit firms, M&A teams, Patent attorneys

### Public sector

Examples: Security authorities, Parliaments, Ministries, Courts, Armed forces, Intelligence services, Police, Foreign service, Crisis management

## Truly agentic, across your applications.

Say what you need once, and the agent carries it through your applications and the operating system itself. A complete workspace, designed for the future of agentic work.

### Example use cases

**Productivity** (Mail, Files, Documents, Web browser): “Read last week's mail on the Miller deal, find the latest offer in our files, put its new figures into the client memo, check the source links, and draft the summary mail to the client for me to review.”

Realtime security monitoring. Examples:

- No client mail sent to a cloud model
- No client files leaving the workstation
- No document sent to a cloud outside the EU
- No compromised agent sending data out

**Research** (Data analysis, Team chat, Idea board, Calendar): “Analyse last week's data from the lab system, post the three biggest outliers in the team chat, collect everyone's explanations on the idea board, and schedule a review for the strongest one.”

Realtime security monitoring. Examples:

- No unpublished results sent to a cloud model
- No results shared outside the lab team
- No ideas sent to a cloud outside the EU
- No meeting details visible outside the team

**Investigation** (Translation, Police databases, Link chart, Case file): “Translate the seized chats, check the names and numbers against the police databases, draw the link chart of who was in contact with whom and when, and draft the report for the case file.”

Realtime security monitoring. Examples:

- No case data sent to a cloud model
- No personal data sent to a cloud outside the EU
- No name looked up outside the police databases
- No evidence leaving the workstation

## Control that goes as deep as the agents do.

We combine security safeguards at OS and machine level. Each is designed for agents that move down the stack, from single apps into the operating system itself. Together they close gaps that other approaches leave open.

### Controlled actions

Every step an agent takes is checked first: it is allowed, asked about or refused.

- **Allow:** the action runs within your policy.
- **Ask:** the user confirms first.
- **Refuse:** the action never runs.
- **Audit log:** a full record of what the agent did, kept to strict user privacy standards.

### Clean, sealed, reset

Technically an immutable, stateless system. On request fully local-first and air-gapped.

- **Clean:** one approved, fingerprinted and audited setup, checked at every start.
- **Sealed:** one connection to the outside, every request on it passes your policy.
- **Reset:** back to that setup, like a factory reset, after each project, at a reboot, or at the CISO team's button.

### Future-proof

Agents will soon run entire workstations, deeper than any app reaches.

- **Today:** agents work in the cloud and inside single apps.
- **Next:** they run the whole workstation, down to the operating system.
- **In the OS:** our control sits in the operating system itself, as deep as agents will go.

## No fleet migration required.

We build for the people who work with Sondy every day, and just as much for those who roll it out, maintain it and manage procurement. It is being built to start in a window, on the machines your IT already manages.

### It runs like an app

An agentic workspace, being built for the highest security, in a window on the laptop you already have.

### Or as the only operating system

For those who need the extra level of security: Sondy is being built to secure the whole workstation, from boot and kernel up.

### Built for trust

- **Regular independent audits:** outside security firms test what we ship.
- **An open, reviewable core:** anyone can review our code in our public repository.
- **Open standards instead of lock-in:** we contribute our protocol between agents and applications to the Linux community.
- **Local and privacy first by design:** runs on your own hardware, no vendor connection needed, bring your own models.
- **Our certification targets:** CE mark under the EU Cyber Resilience Act, EUCC, BSI approval for VS-NfD.
- **A sovereign stack, made in Europe:** GDPR compliant, on European infrastructure.

## Coming soon.

There's more to talk about. Let's get in touch.

### Investors: Invest while we build it.

- Product development has started, and early investors are welcome.
- Meet the team and experience a live demo.

[Get investor access](https://www.sondy.run/investors/)

### People: Work on hard problems that matter.

- How do you audit everything an agent does without watching the person it works for?
- How do you evaluate an agent on data that nobody is allowed to see?
- How does a person stay in control of work they no longer do by hand?
- How do you control agents without limiting their intelligence?
- Who builds that in Europe, on open source?

[See our open positions](https://www.sondy.run/build/)

### Expert community: See it first. Then break it.

- Private preview planned for early 2027.
- For experts in engineering, AI, Linux, security and IT.

[Join the waitlist](https://www.sondy.run/community/)

## Disclaimer

### State of development

Sondy is in development. Everything on this site describes plans and intentions: features, security concepts, dates, audits and where our technology comes from. None of it is a binding commitment, a guarantee or a warranty, and all of it may change.

### Certificates and compliance

Sondy does not yet hold any of the certificates named on this site, and no authority has confirmed its compliance with any law, the GDPR included. The marks of certification bodies stand for what we work towards. A stack built in Europe on European infrastructure is a goal as well.

### Use cases

The use cases are fictional examples of what Sondy is being built for. They show no real case, no real person and no real data, and the names in them are invented. Whether an AI agent may carry out a step they show, such as a search in a police database, depends on the law and on the rules of each organisation. We do not claim that it is permitted today. The examples under realtime security monitoring name what it is being built to stop.

### Pictures and animations

Pictures and animations are simplified illustrations and not screenshots of a product.

### Sectors, organisations and trademarks

The sectors, organisations and buildings shown are examples of who we build for. They are not customers or partners, and nothing on this site implies that a public body, a company or a person endorses Sondy or is affiliated with it. Names, logos and trademarks of others belong to their owners.

### No offer and no advice

Nothing on this site is an offer or an invitation to buy securities, and nothing on it is investment, legal or tax advice.
