Sovereign Server

A 4U rack server with 8× NVIDIA RTX 6000 Pro GPUs and 768 GB VRAM, Helix pre-installed. Ship to your data centre, power on, run hundreds of concurrent agents with zero cloud dependency.

We ship a fully configured rack server to your data centre with Helix pre-installed. Plug it in, power it on, and your team has a private AI agent fleet: hundreds of concurrent agents, each with their own GPU-accelerated desktop, with zero cloud dependency. No API keys, no token metering, no data leaving your building.

Learn why digital sovereignty matters →

Ready to buy? Purchase a Sovereign Server → · Talk to sales →

Hardware

The Sovereign Server is built on the Gigabyte G494-SB4, a 4U GPU-optimised server platform.

Base configuration:

Configurations are customisable. We spec the server to your workload during onboarding.

What's included

Hardware — Server assembled, tested, and burned in before shipping.

Software — Full Helix stack pre-installed: inference, RAG, agents, agent desktops, fleet orchestration, observability. Ready on first boot.

Onboarding — An 8-week structured onboarding with the Helix team covering git workflow integration, CI/CD pipelines, SSO, and Slack/Teams setup. Weekly check-ins.

First-year license — Enterprise license included. Renews annually after year one.

Warranty — 3-year return-to-base hardware warranty. On-site support upgrades available.

SSO and RBAC

The Sovereign Server runs Helix Enterprise, which includes:

• OIDC SSO — connect to any OIDC-compatible provider (Okta, Azure AD, Google Workspace, Keycloak)
• SAML 2.0 — for providers that don't support OIDC
• RBAC — admin, member, and read-only roles per organization and project
• SCIM provisioning — automate user lifecycle via your IdP

Configuring SSO

SSO is configured in the Helix admin panel under Settings → Authentication. You'll need:

• Your IdP's authorization endpoint, token endpoint, and JWKS URI
• A client ID and client secret from your IdP
• The Helix callback URL to register: https://your-helix-url/api/v1/auth/callback

For Azure AD / Entra ID, create an App Registration. For Okta, create an OIDC application. The Helix team will help configure this during onboarding.

Air-gapped operation

The Sovereign Server is designed to operate with no outbound internet access after initial setup. All inference runs on the local GPUs; all data stays on the hardware.

In air-gapped mode:

• Disable the version check: set HELIX_DISABLE_VERSION_CHECK=1 in the control plane environment
• Configure an internal APT mirror for sandbox container bootstrapping: set HELIX_SANDBOX_APT_MIRROR to your mirror URL
• For private CAs and internal TLS: inject your CA certificate into the system trust store during onboarding
• For internal git servers (GitHub Enterprise, GitLab self-hosted): set HELIX_GITHUB_BASE_URL or the equivalent for your provider

License and activation

The server ships pre-licensed for the first year. License keys are managed by the Helix team via the onboarding process.

For renewal and additional seat licenses, contact sales@helix.ml or log in to your account.

Upgrade and maintenance

Helix software upgrades are delivered as Docker image updates. The Helix team coordinates upgrades during onboarding and provides a maintenance schedule.

See Upgrade & migrate for the general upgrade procedure.