1. Sovereignty That Stays in One Room Does Not Last
An owner who must sit in front of a particular machine to use their assistant will use it less. A tool that is used less is a tool whose benefit shrinks. Sovereignty has to be usable if it is to be kept.
The objection to remote access is a fair one. If the point of a private AI is that nothing leaves the owner's hardware, then a phone in a taxi appears to cut straight across it. It does not have to.
2. How the Connection Works
SARION Appliances extend to mobile apps that reach the home system through a VPN tunnel. The owner uses the assistant from a phone while travelling, and the connection goes back to the owner's own system without routing through a third party's servers.
The AI does not move. It stays on the owner's infrastructure. Only a secure, private tunnel back to it crosses the public internet.
The model, the memory and the documents remain on the appliance. What travels is the owner's request and the assistant's reply, through a tunnel the owner controls, and at no point does an AI vendor's server sit between them.
3. What the Tunnel Adds
Honesty matters here. A zero-egress system with the network switched off has the smallest possible exposure. A system reachable through a tunnel has a little more. It has a point at which the outside world can knock on the door.
That is a trade, and a reasonable one when it is made on purpose. The questions are practical.
- Who holds the means to connect? Each device with access to the tunnel is a device that could be lost, stolen or compromised.
- What does a connected phone expose? The phone is part of the system while it is in use. Its security is the owner's security.
- What happens if a device goes missing? The owner needs a way to cut that device's access quickly.
- Who else on the household has access? Per-member instances keep one person's access from becoming another's.
4. Physical Isolation Stays With the Owner
The Confidant and Regent tiers carry a physical, manual mechanism for isolating the network interface, which gives the owner absolute control over external data ingress. SARION Sovereign includes everything in Regent.
That means remote access is a state the owner chooses, and one the owner can end with a physical act. For a period of heightened concern, such as a negotiation, a security incident or a trip to somewhere sensitive, the owner can close the door by hand. No setting on a screen can reopen it.
5. Policies Worth Writing Down
A family office should decide in advance when the tunnel is open.
- Default state. Is remote access normally on or normally off?
- Closed periods. Which circumstances call for physical isolation, and who decides?
- Approved devices. Which phones and tablets may connect, and who keeps the list?
- Lost-device procedure. Who acts, how fast, and how does the owner know access has ended?
- Travel rules. What may and may not be discussed through the assistant from a hotel, an aircraft or a foreign network?
6. Using It Sensibly Away From Home
- Treat the phone as part of the sovereign system and keep it updated.
- Avoid shared or public devices for access.
- Be aware of who can see the screen and hear the voice interaction.
- Do not assume the surroundings are private because the tunnel is.
The tunnel protects the path between the phone and the home system. It cannot protect against someone reading over the owner's shoulder.
7. The Same Principle, Reached Another Way
Migration, described in another briefing, offers a different answer for longer absences: a replica running at the second location. Remote access suits short trips and quick questions. Migration suits seasons away. Both preserve the central point, which is that the AI stays under the owner's control.
8. Availability
Mobile access through a secure tunnel is an advanced feature on SARION Regent and SARION Sovereign. To discuss how it should be configured for your household, contact us at volta.quest.