When AI suddenly stops,
keep business running:
a BCP for cyberattacks and disasters with cloud AI and one closed-network unit
Cloud AI can suddenly become unavailable one day because of a cyberattack, a line failure or a change in the terms of service. The same is true on the day you disconnect your network after a ransomware attack. When that happens, you do not want document drafting and meeting minutes to stop too. If you place one Sovereign GaiXer unit on a closed network inside your organization, that unit keeps running even when cloud AI stops, because it does not depend on outside lines. This article explains four types of “crisis” including cyberattacks, the latest data from Japan’s National Police Agency and IPA, how to divide work between normal times and a crisis, where to place the unit in local governments, hospitals and private companies, and how to prepare power and other essentials.
Key points
A sovereign AI BCP means placing one generative AI unit that runs inside a closed network, so that document drafting, meeting minutes, manual search and other work can continue in a crisis when cyberattacks, disasters or other events make cloud AI unavailable. Cloud AI can stop because of line outages, foreign regulations or service termination, and also because of cyberattacks. According to Japan’s National Police Agency, 123 ransomware cases were reported in the first half of 2026, the most for any half-year on record. If an attack forces you to disconnect your network, cloud AI becomes unavailable as well. In normal times, you use it alongside cloud AI, handling confidential work such as resident, patient and customer data on the closed-network unit. Whether you are a local government, a hospital or a company, the place for it is “a segment next to the information you want to protect, with no route to the internet.” In a crisis, the closed-network unit keeps running even when cloud AI stops. Cloud AI for everyday productivity; sovereign AI for business continuity in a crisis. To run it in a crisis, however, you must secure power through backup power, a UPS or similar equipment. Placing it on a closed network also does not make it immune to attack, so prepare operating rules as well, such as procedures for bringing in media.
- What you will learn, 1: what a “crisis” that stops cloud AI looks like. There are four: cyberattacks (security incidents), line outages, foreign regulations and export controls, and service termination or changed terms.
- What you will learn, 2: what you can keep doing on the closed-network unit on the day you disconnect your network after ransomware or another attack, and why a closed network still calls for caution.
- What you will learn, 3: how to divide work between normal times and a crisis, where to place the unit in local governments, hospitals and private companies, and six things to prepare in advance, starting with power.
What “crisis” stops cloud AI? There are four ways it can stop
Cloud AI (generative AI running on another company’s servers on the internet) is a convenient, high-performing tool. But because it runs beyond your reach, it can stop for reasons you cannot control. In this article, we call that situation a “crisis.” There are four main ways it can stop. Of these, the one closest to home today is the cyberattack.
A cyberattack forces you to disconnect, or a service stops
After ransomware or another attack, you disconnect your network to stop the damage from spreading. Once disconnected, you cannot reach cloud AI on the internet either. A contractor or service you rely on may also be attacked and stop.
A failure or disaster cuts the line
A carrier outage, or lines cut by an earthquake or flood. Without an internet connection, you cannot reach cloud AI. And disasters are exactly when notices and record-keeping work increase.
Foreign regulations or export controls cut off access
Overseas services are subject to the laws, regulations and export control rules of their home countries. If those rules change, service can stop with nothing users in Japan can do about it.
A service ends, or its terms change
A service shuts down, prices or terms of use change, or the AI model you used is retired. There is no guarantee you can use it next year on the same terms as today. The more it is built into your work procedures, the greater the impact.
For the daily commute, the train is convenient. It is fast and goes a long way. But trains sometimes stop. For those days, you keep a car you can drive yourself to work. If cloud AI is the train, the closed-network unit is the car. The point is not which is better; it is that having both keeps you moving.
If a cyberattack stops AI, what happens to your work? The closed-network unit keeps running even on the day you disconnect
The “crises” a BCP prepares for are not only earthquakes and power cuts. The one closest to home today is ransomware (a cyberattack that encrypts or steals data and demands a ransom). In Japan, too, there have been a string of cases where an attack halted ordering and shipping, medical care or service counters for a long time. Organizations that are hit disconnect their networks to stop the spread. At that moment, cloud AI on the internet becomes unavailable as well.
| Cyberattacks today, in numbers | Published figures | Source |
|---|---|---|
| Reported ransomware cases (first half of 2026) | 123 cases, the most for any half-year since statistics began in the second half of 2020 | National Police Agency |
| Main infection route | VPN devices (equipment for reaching the internal network from outside): about half | National Police Agency |
| Time to recover | Organizations that recovered in less than one month: just under half | National Police Agency |
| Investigation and recovery costs | Organizations that spent JPY 10 million or more in total: about 60% | National Police Agency |
| Threat ranking for organizations | 1st: “Damage from ransomware attacks”; 2nd: “Attacks targeting supply chains and contractors”; 3rd: “Cyber risks around the use of AI” | IPA |
Source documents: National Police Agency, “Cyberspace Threat Situation in the First Half of 2026” (PDF, Japanese) / IPA, “10 Major Security Threats 2026” (Japanese)
You disconnect the network to contain the damage
When an infection is found, the basic first step is to cut off communications. Close the exit to the internet, and you can reach neither cloud AI nor any outside service. According to the National Police Agency, just under half of organizations recovered in less than one month. You also need to plan for the possibility that the disconnection lasts a long time.
You are unharmed, but the services you use stop
When a contractor or cloud service is attacked, it stops and users can do nothing about it. In IPA’s 10 Major Security Threats, attacks targeting supply chains and contractors rank 2nd.
You stop sending data out until the investigation ends
If suspicious access or an account takeover is suspected, you may need to stop using outside services until the cause is known. Even while things are stopped, notices to residents, patients and business partners, and records of your response, cannot wait.
| Work that arises during an incident | What the closed-network unit can do |
|---|---|
| Records of response meetings (what was decided, when and by whom) | Transcribe meeting recordings inside the unit and draft minutes and a timeline |
| Notices to residents, patients and business partners | Draft apology and information notices from bullet points |
| Reports to senior management and relevant organizations, including authorities | Summarize scattered notes and records into a report outline |
| Checking procedures (incident response procedures, BCP) | Ask questions to find the next step in procedure documents loaded into the unit |
| Handovers for work switched to paper or manual processes | Organize notes and write handover text for the next shift |
Runs on the internal LAN only, without the internet
It has an internet isolation switch, set to blocked by default. You can place it where traffic does not pass through VPN devices or externally exposed paths, which are common entry points for attacks.
Usable while cut off from the affected segment
If you separate segments (networks divided by role), as in the three-segment model of Japanese local governments, a unit placed in the closed segment is less likely to be affected even when the internet side is disconnected.
Tamper-checked updates and records of who used it
AI-OS updates are checked for tampering with digital signatures before they are applied, and roll back automatically if they fail. Permission separation, automatic lockout after repeated failed logins, and audit logs are also standard.
A ship is divided into many compartments. If water floods one compartment, closing its doors keeps the others safe, and the ship can keep going. The closed-network unit is a tool kept in a different compartment from the flooded one. That compartment's doors, too, must be controlled, with a record of who goes in and out: procedures for bringing in media, permission management and audit logs.
Where on your network should the closed-network unit go, so you can still use it on the day you disconnect? We can work through it with you, based on your network diagram, in a 15-minute online consultation.
How do you divide the work between normal times and a crisis? Share the work day to day; rely on the closed-network unit in a crisis
The closed-network unit is not a machine you keep in storage only for emergencies. You use it every day, in normal times, for confidential work. Cloud AI handles research on public information and general writing; Sovereign GaiXer handles work involving information that cannot leave the organization, such as resident or patient data. When a crisis comes, the closed-network unit supports the work.
Use it alongside cloud AI, with confidential work on the closed network
Information that may leave the organization goes to cloud AI; information that may not goes to the closed-network unit. Choose the tool by how sensitive the information is. The closed-network unit does not send input to the internet; it processes everything inside the unit.
When cloud AI stops, the closed-network unit keeps running
Sovereign GaiXer does not need an internet connection and runs on the internal LAN alone. It keeps running on site during network outages and disasters. PCs that already use the closed-network unit day to day need no switchover.
| Item | Normal times | Crisis |
|---|---|---|
| Cloud AI | Used for research on public information and general writing | Can stop because of cyberattacks, line outages, regulations or changed terms |
| Closed-network unit (Sovereign GaiXer) | Handles confidential work, such as resident, patient and customer data, on the closed network | Keeps running, because it does not depend on outside lines |
| Work you can continue | Drafting, summarizing and searching for confidential work | Drafting and summarizing documents / meeting minutes and transcription / searching disaster plans and manuals |
| Cost | One-time purchase of JPY 3,806,400. No extra charges as usage grows (excluding electricity and other operating costs) | No extra charges even when crisis usage grows (excluding electricity and other operating costs) |
Emergency equipment left at the back of a storeroom is easy to forget: when you need it, you may not remember how it works or where it is. A tool you use every day that keeps working on the day the line goes down is the most reliable preparation of all. That is why you use the closed-network unit for confidential work in normal times.
What work can continue in a crisis? Writing, recording and looking things up
In disasters, failures and cyberattacks, the work that grows is notices to residents, patients and business partners, records of the response, and procedure checks. The closed-network unit can handle all three without outside lines. Each is a function that runs entirely inside the Sovereign GaiXer unit.
Drafting and summarizing documents (such as notices for residents)
Notices of evacuation shelter openings, changes to garbage collection, changes to service-counter hours. List the key points, and you get back a readable draft notice. It can also condense long reports into material for senior staff.
Meeting minutes and transcription (no internet needed)
Record response headquarters meetings, transcribe them and turn them into draft minutes. The transcription engine runs inside the unit and does not connect to the internet.
Searching and answering from disaster plans and manuals
Ask “What are the standards for supplies to distribute at shelters?” and it reads the disaster plans and manuals loaded into the unit to answer. It cuts the time spent flipping through thick binders. It can read PDFs and Office documents.
On the day the line goes down, what helps most is not a phone book but an experienced colleague right beside you who answers immediately. The closed-network unit is like a colleague who has read your organization’s documents. Even on a day when you cannot reach the outside, it answers questions about procedures, takes meeting records and drafts notices.
Where should the unit go? In a closed segment next to the information you protect: placement for local governments, hospitals and companies
The idea is the same for local governments, hospitals and private companies. Place it in a segment that does not connect to the internet (a part of the network divided off by role), next to the information you want to protect. What the segment is called differs by organization: the My Number administration segment for a local government, the electronic health record (EHR) network for a hospital, and a segment for departments or systems that handle confidential information for a company. When choosing, check that the location meets the four conditions below.
- Condition 1: Next to the information you protect. Place it in the same segment as the work that handles information that must not leave, such as resident, patient and customer data or design information.
- Condition 2: No route to the internet. Choose a place that is unlikely to be affected when the line goes down or when the internet side is disconnected after an attack. Keep it away from routes to the outside as well, such as maintenance VPNs.
- Condition 3: Reachable from the users’ PCs. The closed-network unit is used through a browser from PCs in the same segment. Check that the PCs of the people who will use it in a crisis are in that segment.
- Condition 4: Power in a crisis. Choose a room and outlet connected to backup power or a UPS (see the next section).
Keep the segment where everyday work PCs use cloud AI separate from the closed segment that handles the information you protect. The closed-network unit goes in the closed segment on the right. The diagram is one example of the idea; the actual layout is designed to fit each organization’s network and security rules.
| Organization | Where to place the closed-network unit | PCs used day to day | Points to watch |
|---|---|---|---|
| Local government (β' model) | My Number administration segment | Work PCs in the responsible department (browser) | Keep the segments separate. Bring in AI-OS updates on USB drives or similar media according to set procedures |
| Hospital | The EHR network or a similar network for medical information systems (the hospital’s closed network) | Hospital PCs connected to that network (browser) | Before connecting, consult the EHR vendor and the hospital’s IT staff. Keep it away from routes to the outside, such as maintenance VPNs |
| Private company | A segment of the office LAN with no internet access (for departments or systems that handle confidential information) | Employee PCs connected to that segment (browser) | Even without a separate segment on the office LAN, keep the unit’s internet isolation at its default setting, “blocked.” Write into your procedures how much of the office LAN to disconnect during an attack |
Place it next to patient data, such as on the EHR network
Many hospitals keep the network for electronic health records and other medical information systems separate from the network connected to the internet. That network, next to patient data, is a candidate location for the closed-network unit. Because you will be connecting a new device, consult the EHR vendor and the hospital’s IT staff in advance.
Connect it to the office LAN, with internet access blocked
The easiest option is to connect it to your everyday office LAN. The unit’s internet isolation switch is set to “blocked” by default, so the unit itself does not go out to the internet. It holds up well against line outages, but it may become unusable if the whole office LAN has to be disconnected.
Create a segment for confidential information and place it there
Create a segment for departments or systems that handle confidential information, such as design, R&D, HR and accounting, and connect only the closed-network unit and the PCs that use it. Even if the internet side of the office LAN is disconnected after an attack, it is easier to keep using it inside the segment. If you also want to prepare for cyberattacks, this option is the better fit.
Let’s look at local governments in more detail, using the β' model. Japanese local government networks follow the “three-segment model,” which protects the network by dividing it into three segments: the My Number administration segment (systems that handle Japan’s national ID number, “My Number”), the LGWAN segment and the internet segment. Within this, the β' (beta-prime) model places everyday work PCs and business systems in the internet segment. This makes cloud AI easy to use in daily work, but when the line goes down, that cloud AI stops. So the closed-network unit goes in the My Number administration segment.
The My Number administration segment on the far left does not connect to the internet. A unit placed here is unaffected even if the internet line goes down. Because the segments are separate, it is also a location less likely to be affected when the internet segment is disconnected after a cyberattack. The diagram is one example configuration; the actual layout is designed to fit each local government’s network.
Placed next to resident data, with no external communication
Resident data is processed inside the office and is not sent out. AI-OS updates are brought in on USB drives or similar media according to set procedures. Staff in the responsible department use it from their work PCs through a browser. No dedicated software is required.
A network for government use only, separated from the others
This segment connects to LGWAN (the dedicated government network linking Japanese local governments). It is separated from the My Number administration segment and divided from the internet segment by a firewall.
PCs for daily work; cloud AI is used from here
Under the β' model, everyday work PCs are here. LGWAN-ASP services are used through VDI, which transfers only the screen. What may stop in a crisis is the cloud AI beyond this segment.
You keep the safe for important papers not by the front door but in the innermost room. Because outside commotion hardly reaches it, the contents stay protected and can be taken out even if the outside line goes down. The My Number administration segment at a government office, the EHR network at a hospital, a segment for confidential information at a company: the names differ, but the idea of placing the closed-network unit in the “innermost room” is the same.
What do you need to run it in a crisis? Securing power, and six things to prepare in normal times
“Works when the line goes down” and “works during a power cut” are different things. The closed-network unit only covers line problems. Your organization provides the electricity. On that basis, if you complete the following six steps in normal times, you can use it without hesitation in a crisis.
One outlet, on a backup-powered circuit
The unit runs on one AC 100–240V outlet and the included 240W AC adapter. The basic approach is to connect it to an outlet on the backup power circuit, or to a UPS.
PCs, switches and routers on the same power
Even if the unit is running, staff cannot use it if their PCs or the switches in between are down. Include the whole path from the unit to the PCs in your power plan.
Compact, about 15 cm square. No rack or dedicated cooling needed
The unit measures about 150 × 150 × 50.5 mm and weighs about 1.2 kg. Even without a server room, you can place it in a room with backup power.
- Step 1: Secure power. Connect to backup power or a UPS, and during disaster drills, check that every device from the unit to the PCs works in a crisis.
- Step 2: Load your documents. Load disaster plans, work manuals and notice templates into the unit in normal times. It cannot answer from documents it does not have.
- Step 3: Get used to it in normal times. Use it routinely for drafting and summarizing confidential work. A tool you first touch in a crisis is hard to use well.
- Step 4: Decide who uses it, and on which PCs. The closed-network unit can be used only from PCs in the segment where it is installed. Decide who will use it in a crisis and on which PCs, and complete user registration and permissions in advance.
- Step 5: Set procedures for bringing in update media. AI-OS updates are applied on USB drives or similar media, without leaving the closed network. Update packages are checked for tampering with digital signatures before being applied. Decide the checks and records required when bringing media in.
- Step 6: Prepare procedures that assume a cyberattack. In your incident response procedures or IT-BCP, write down “the work to continue on the closed-network unit on the day the network is disconnected” and “the procedure for disconnecting and checking the closed-network unit if damage to it is suspected,” then test them in drills.
An evacuation route is not preparation just because it is posted on the wall. Only after you actually walk it at least once a year can you move without hesitation when it counts. The same goes for the closed-network unit: by connecting it to power, loading your documents and using it routinely, you make it a tool you can rely on in a crisis.
Can hospitals use it for their BCP? Keep records and summaries going on the hospital’s closed network
Yes. The idea is the same as for local governments. Patient data stays inside, processed on the hospital’s closed network. The candidate location is the EHR network or a similar network for medical information systems (see the placement section). On top of that, you make sure records and document drafts can continue even on a day when outside lines are down. Hospitals have also suffered cyberattacks that stopped electronic health records (EHR) and other systems. According to the National Police Agency, 9 of the ransomware cases in the first half of 2026 were in healthcare and welfare. Even on a day when hospital systems are disconnected and work switches to paper, if the closed-network unit is outside the scope of the damage, you can keep organizing records and handovers.
Drafting clinical and intake records
It drafts records from notes and interview content. Input is processed inside the unit and is not sent outside the hospital.
Summarizing medical documents and handovers
Summarize long progress notes and referral letters for handovers to incoming staff. The more staff rotate in a crisis, the more handover quality matters.
Searching hospital manuals and disaster procedures
Load disaster intake procedures and hospital rules into the unit, and you can find them by asking. Time spent hunting through binders can go to patients instead.
Common misconceptions, and the reality
When people hear “a BCP for AI,” they tend to picture giving up cloud AI or keeping an expensive standby system idle. In reality, it means dividing roles and using both from normal times, and having one unit that keeps running in a crisis.
| Common misconception | The reality |
|---|---|
| If we use cloud AI, we do not need to think about a BCP | It can stop for reasons beyond users’ control, such as cyberattacks, line outages, foreign regulations or changes in service terms. You need separate preparation for when it stops |
| Preparing for cyberattacks is IT’s job and has nothing to do with how we use AI | If an attack forces you to disconnect your network, cloud AI becomes unavailable too. If AI is built into your work, write the fallback for disconnection days into your BCP |
| Placing it on a closed network only applies to local governments with three-segment networks | For a hospital, the EHR network or similar; for a company, a segment for confidential information. Place it in a segment next to the information you protect, with no route to the internet, and the idea is the same |
| AI on a closed network is safe from cyberattacks | A closed network still has entry points, such as USB drives and PCs inside the segment. Protect it with media procedures, permission management and audit logs, and disconnect it by the book when damage is suspected |
| If we add closed-network AI, we should stop using cloud AI | There is no need to stop. Cloud AI for everyday productivity; the closed-network unit for confidential work and business continuity in a crisis. Using both is the basic approach |
| Crisis AI can stay switched off and stored away in normal times | Because you use it every day for confidential work, you can use it without hesitation in a crisis. Load your documents in normal times as well |
| When the internet goes down, all generative AI stops | The closed-network unit needs no internet connection and runs on the internal LAN alone. It keeps running on site during network outages and disasters |
| As long as we have the unit, it will work during a power cut | Secured power is a prerequisite. Connect it to backup power or a UPS, and secure power for PCs and switches too |
| AI on a closed network cannot be updated and becomes outdated | It can be updated on USB drives or similar media without leaving the closed network. Update packages are checked for tampering with digital signatures before being applied |
Mini glossary: terms used in this article
Sovereign AI BCP
A sovereign AI BCP means placing one generative AI unit that runs inside a closed network, so that document drafting, meeting minutes, manual search and other work can continue in a crisis when cyberattacks, disasters or other events make cloud AI unavailable.
BCP (business continuity plan)
A plan to keep important work going, or to resume it quickly, when disasters or failures occur.
Sovereign AI
AI kept under your own control. In this article, it means generative AI placed inside the organization that runs without relying on outside services.
Closed network
A network that does not connect to the internet and is closed within the organization.
Crisis and normal times
A crisis is a state in which your usual tools are unavailable because of a cyberattack, failure, disaster, regulation or similar event. Normal times are when work can proceed as usual.
Three-segment model
The approach of protecting Japanese local government networks by dividing them into three segments: the My Number administration segment, the LGWAN segment and the internet segment. It is set out in guidelines from Japan’s Ministry of Internal Affairs and Communications.
β' model
One of the configuration types set out in the Ministry of Internal Affairs and Communications’ “Guidelines for Information Security Policies in Local Governments,” in which work PCs and business systems are placed in the internet segment.
LGWAN / LGWAN-ASP
LGWAN is the dedicated government network linking Japanese local governments. LGWAN-ASP refers to services provided over that network.
UPS (uninterruptible power supply)
A device that keeps equipment running for a while on stored electricity during a power cut.
Transcription
Turning speech from meetings and similar settings into text. Sovereign GaiXer does this inside the unit without connecting to the internet.
VDI (screen transfer)
A system that shows only the screen of a computer located elsewhere on your local PC so you can operate it. Under the β' model, LGWAN-ASP services are used this way.
Network segment
A part of an organization’s network divided off by role or by the information it protects. Communication between segments is restricted by firewalls and similar devices.
EHR network
In a hospital, the network that electronic health records (EHR) and other medical information systems connect to. Many hospitals operate it separately from the network connected to the internet.
Ransomware
A cyberattack method that encrypts or steals data to make it unusable, then demands a ransom in exchange for restoring it or not publishing it.
Security incident
An event, such as a cyberattack or data leak, in which the security of information or systems has been compromised or may be compromised.
Supply chain attack
Attacking a target organization by using weak points in its contractors, business partners or the services it uses as an entry point.
IT-BCP (ICT-BCP)
A plan to keep important work going, or to resume it quickly, when information systems or networks stop. It covers the IT part of a BCP.
BCPs for AI: frequently asked questions (FAQ)
What is a sovereign AI BCP?
A sovereign AI BCP means placing one generative AI unit that runs inside a closed network, so that document drafting, meeting minutes, manual search and other work can continue in a crisis when cyberattacks, disasters or other events make cloud AI unavailable. In normal times, you use it alongside cloud AI and handle confidential work, such as resident, patient and customer data, on the closed-network unit. Even if cloud AI stops in a crisis, the closed-network unit keeps running.
When does cloud AI become unavailable?
There are four main cases: when you disconnect your network after ransomware or another cyberattack, or when a contractor or service is attacked; when a failure or disaster cuts the line; when foreign regulations or export control rules stop the service; and when the service ends or its terms, such as prices or terms of use, change. In every case, it is too late to scramble after it happens, so prepare in normal times.
If we disconnect our network after a ransomware attack, can we still use generative AI?
Cloud AI becomes unavailable, because once the exit to the internet is closed, outside services cannot be reached. The closed-network unit runs on the internal LAN alone without connecting to the internet, so if it is outside the scope of the damage and its segment remains intact while disconnected, you can keep using it. You can continue response-meeting minutes, drafts of notices and reports, and searches of procedure documents. If damage is suspected, disconnect and check the closed-network unit as well, following your organization’s procedures.
Can Sovereign GaiXer be infected with ransomware?
We cannot say it will never be infected. A closed network still has entry points, such as USB drives and other media brought in, and PCs inside the segment. That said, the internet isolation switch is set to blocked by default, and AI-OS updates are checked for tampering with digital signatures before being applied. It also provides permission separation, automatic lockout after repeated failed logins, and audit logs. Use it together with procedures for bringing in update media and protection on the PC side. Sovereign GaiXer is not a security product and does not guarantee protection against, or recovery from, ransomware.
How should we build generative AI into a BCP that assumes cyberattacks?
Think of it in four steps. First, decide what work you want to continue even on a day the network is disconnected (minutes, notices, reports, checking procedures and so on). Next, load the procedure documents and templates for that work into the closed-network unit in normal times. Then write into your incident response procedures or IT-BCP how to use the closed-network unit and how to disconnect it if damage to it is suspected. Finally, test it in drills. You can discuss placement and configuration in a 15-minute online consultation.
Should we stop using cloud AI and switch to the closed-network unit?
There is no need to stop. The basic approach is to use both: cloud AI for everyday productivity, and the closed-network unit for confidential work and business continuity in a crisis. Information that may leave the organization goes to cloud AI, information that may not goes to the closed-network unit, and in a crisis the closed-network unit supports the work.
What work can continue in a crisis?
There are three typical types: drafting and summarizing documents such as notices for residents; meeting minutes and transcription; and searching and answering from disaster plans and manuals. Transcription happens inside the unit without connecting to the internet. Manuals and other documents need to be loaded into the unit in normal times.
Does Sovereign GaiXer work when the internet goes down?
Yes. Sovereign GaiXer does not need an internet connection and runs on the internal LAN alone. It has an internet isolation switch, set to blocked by default. Because processing is completed inside the unit, it keeps running on site during network outages and disasters.
Can we use it during a power cut?
Not without power. Running it in a crisis requires secured power, such as backup power or a UPS in the government building or hospital. The unit runs on one AC 100–240V outlet and the included 240W AC adapter, so connect it to an outlet on the backup power circuit or to a UPS. Also secure power for the PCs that use it and for the switches and routers in between.
Where should the closed-network unit go?
Place it in a segment that does not connect to the internet, next to the information you want to protect. The idea is the same for local governments, hospitals and private companies. When choosing, check four things: it is in the same segment as the work that handles the information you protect; it is away from routes to the outside, such as the internet and maintenance VPNs; it can be reached from the PCs of the people who will use it in a crisis; and it is connected to backup power or a UPS. The actual layout is designed to fit each organization’s network and security rules.
Where should it go under the β' model for local governments?
In the example configuration, it goes in the My Number administration segment. There it can process resident data inside the office without external communication, and AI-OS updates are brought in on USB drives or similar media according to set procedures. Staff in the responsible department use it from their work PCs through a browser. The diagram is one example configuration; the actual layout is designed to fit each local government’s network.
Where should it go in hospitals and private companies?
In hospitals, the candidate location is the EHR network or a similar network for medical information systems (the hospital’s closed network). Because you will be connecting a new device, consult the EHR vendor and the hospital’s IT staff in advance, and choose a place away from routes to the outside, such as maintenance VPNs. In private companies, creating a segment for departments or systems that handle confidential information and placing it there is a placement that is also more resilient to cyberattacks. Even if you connect it to the office LAN without a separate segment, keep the unit’s internet isolation at its default setting, “blocked.”
In a crisis, can PCs connected to the internet use the closed-network unit?
To keep the segments separate, the closed-network unit is used from PCs in the segment where it is installed. Decide in normal times who will use it in a crisis and on which PCs, and complete user registration and permissions. If you want to use it from several segments, we can discuss placement, including additional units.
How does GaiXer on LGWAN-ASP differ from Sovereign GaiXer?
GaiXer is a generative AI service from its provider, FIXER, and is a cloud service registered as an LGWAN-ASP service (registered December 2024). It is used over LGWAN. Sovereign GaiXer is a single unit placed inside your organization that runs inside the unit without external communication. Because it does not depend on network lines, it can also serve as preparation for business continuity in a crisis.
Can hospitals use it for their BCP?
Yes. Placed on the hospital’s closed network, it can be used for drafting clinical and intake records, summarizing medical documents and searching hospital manuals. Patient data is processed inside the unit and is not sent outside the hospital. Generated output is drafting support that assumes review by healthcare professionals and does not replace diagnostic or treatment decisions. Running it in a crisis requires secured power.
Summary: a BCP for AI in three points
- Cloud AI can suddenly stop one day. Cyberattacks, line outages, foreign regulations and export controls, service termination or changed terms. Ransomware cases in the first half of 2026 were the most for any half-year on record, and if an attack forces you to disconnect your network, cloud AI becomes unavailable too.
- Cloud AI for everyday productivity; sovereign AI for business continuity in a crisis. In normal times, use both, with confidential work on the closed-network unit. In a crisis, the closed-network unit supports documents, minutes and manual search.
- Running it in a crisis requires secured power. Connect it to backup power or a UPS, load your documents, decide who uses it and on which PCs, and use it routinely. To prepare for cyberattacks, also set procedures for bringing in media and for disconnection. Only then does it become reliable preparation.
Trains are fast and convenient. But some days they stop. On those days, if you have a car you drive regularly, you can still get to work. Keep using the train called cloud AI, and drive the car called Sovereign GaiXer every day for confidential work. Securing power is keeping fuel in the tank. Start with one reliable backup on your closed network. That is the first step in a BCP for any organization that builds AI into its work.
Related reading
What happens when you connect to the company LAN?
Three connection patterns. Installation on a closed network without the internet, eight items to agree with IT, and maintenance after deployment.
Product guide, Part 5What if your network blocks internet access?
The product works even without outbound traffic. Three approaches to choose from, including updating by USB.
Product guide, Part 7Turn NVIDIA GPUs into business AI from day one
Why it can go straight into government, local government and hospital settings: four things Sovereign GaiXer handles as software.
“With our configuration, where should it go so we can still use it on a disconnection day?” We can check this with you in a 15-minute online consultation, based on your network configuration and BCP procedures. We also accept requests for materials and hands-on trials.
This article is based on information as of October 2026. All listed prices describe the Japanese offer; overseas pricing and commercial conditions require confirmation. Ransomware case numbers, infection routes, recovery times and costs are based on figures published by the National Police Agency in “Cyberspace Threat Situation in the First Half of 2026” (published September 2026), and the threat ranking on figures published by IPA in “10 Major Security Threats 2026” (published January 2026). Installation on a closed network does not guarantee freedom from cyberattacks. Sovereign GaiXer is not a security product and does not guarantee protection against, or recovery from, ransomware or other attacks. If damage is suspected, follow your organization’s incident response procedures. The β' model is a configuration type defined in the Ministry of Internal Affairs and Communications’ “Guidelines for Information Security Policies in Local Governments.” The diagram is one example configuration; the actual layout is designed to fit each local government’s or organization’s network. To keep segments separate, a unit installed on a closed network is used from PCs in the segment where it is installed. Running it in a crisis requires secured power, such as backup power or a UPS in the government building or hospital. The unit’s power consumption and UPS runtime vary by configuration and equipment. For details on installation location and layout, please check with us in a 15-minute online consultation. AI output is a draft; staff should review documents for residents and official records before use. Generated output for healthcare is drafting support that assumes review by healthcare professionals and does not replace diagnostic or treatment decisions. Statements about cloud AI are general assumptions about cloud-based generative AI services; they do not compare specific products or services, nor recommend or advise against any particular provider. All prices exclude tax. “No extra charges” refers to the unit price, excluding electricity and other operating costs; paid options such as GaiXer Care are separate. For details of the LGWAN-ASP registration of GaiXer (cloud service), see the announcement by its provider, FIXER. “AI-OS” is a descriptive name for the role of the software foundation that lets organizations use AI safely in their work. The train, car, safe and other comparisons are analogies explaining how the product is used and do not indicate compatibility or equivalence with any specific product. ThinkStation is a Lenovo trademark. A trademark application for Sovereign GaiXer is pending.
Company, product, and service names mentioned are trademarks or registered trademarks of their respective owners.