Skip to content
Ribonic

On-premises voice AI

We build voice agents that run inside your data center.

Audio, transcripts and model weights stay on hardware you own. No third-party API sits in the call path.

Turn latency target
< 800 ms
p95, speech end to first audio out
Egress from perimeter
None
by architecture, not by policy
First agent live
6-8 weeks
narrow scope, one call flow
FIG. 1
On-premises voice call pathA SIP trunk enters the customer perimeter and terminates at a session border controller. Voice activity detection, speech recognition, the language model, speech synthesis and the CRM all run inside the perimeter. No audio, transcript or model weight leaves it.CUSTOMER PERIMETERSIP TRUNK / PSTNSBCmedia anchorVADturn detectASRtranscribeLLMyour weightsTTSsynthesizeCRMyour recordsaudio returned to callerCROSSES PERIMETER: NONE
On-prem call path · Rev 2026.08 · Ribonic

MethodThese are the targets the reference architecture is designed against, measured on our own rack. They are not results from a named client deployment. Your figures depend on GPU class, model pair and how much tool calling sits in the turn; we agree the budget before we build and we report against it.

FIG. 1

Nothing crosses the perimeter. Here is the path that shows it.

A voice turn touches seven systems. In an on-premises deployment every one of them runs on your side of the firewall. So the question a security reviewer actually asks, what leaves the building, has a one-word answer.

  1. 01SIP trunkYour carrier, your numbers.
  2. 02SBCSession border control, media anchoring.
  3. 03VADSpeech start and end detection.
  4. 04ASRStreaming transcription on local GPU.
  5. 05LLMOpen-weights model, hosted by you.
  6. 06TTSStreaming synthesis.
  7. 07CRM / coreYour systems of record.
What crosses the perimeter
ItemLeaves
Call audioNo
TranscriptsNo
Model weightsNo
Prompts and tool callsNo
Model downloadsOnce

MethodReference architecture for a voice agent inside a bank DMZ. Zone boundaries drawn at the SBC and the inference subnet. The only inbound path is the carrier SIP trunk; the only outbound path is the one-time model pull, which can be satisfied from removable media.

TAB. 1

What one GPU node is sized to hold.

Hardware questions decide the budget, so they come before the demo. These are the figures we size against when we specify a node.

GPUASR / TTS pairConcurrent callsTurn latency target
A100 80GBparakeet / xtts40-45< 800 ms
L40S 48GBparakeet / xtts28-32< 850 ms
A10G 24GBwhisper-s / piper10-14< 1000 ms
RTX 4090 24GBwhisper-s / piper8-12< 1000 ms

MethodSizing model, not a client benchmark. Assumes a 7B-14B open-weights model served under vLLM, 8 kHz G.711 ingress, and one tool call per turn. Concurrency is the point at which p95 turn latency crosses the target, not the point at which the node saturates. We re-measure on your hardware during the pilot and hand you the harness.

TAB. 2

English and Spanish on the same call.

Roughly one in five US households speaks Spanish at home, and a large share of inbound volume switches language mid-call. Most voice stacks treat that as an error condition. We treat it as the default case, because on a collections or benefits line it is.

LanguageStatusNote
English (US)ProductionPrimary target. Tuned per deployment on your own call recordings.
Spanish (US / LatAm)ProductionFull turn handling, not a transfer-to-agent fallback.
Code-switched EN/ESProductionLanguage detected per utterance, not per call.
French (Canadian)SupportedDeployed. Expect a tuning pass on domain vocabulary.
Mandarin, Vietnamese, TagalogSupportedDeployed for public-sector and health lines.
OthersOn requestWe will tell you when the available models are not good enough.

MethodStatus reflects what we have run in a production call flow, not what a model card claims. Word error rate varies with domain vocabulary and line quality, so we benchmark on your own recordings during the pilot and give you the result, including any case where a hosted alternative beats our stack.

Engagements

Four ways in, each answering a different question.

Scoped so that the cheap thing comes first and nothing depends on a long commitment made before you have evidence.

Is this worth doing at all for our volume?

Feasibility review

We look at your call volume, your flows and your existing telephony, then give you a written recommendation and a hardware cost model. If the answer is that a hosted API is cheaper for you, that is what the document says.

Duration
2 weeks
Pricing
Fixed fee
  • Call flow analysis
  • Hardware and cost model
  • Build or buy recommendation

Can it actually hold a conversation on our calls?

Pilot

One narrow call flow, running on one of your GPU nodes, taking real calls. Scoped so that failure is cheap and visible. You keep everything built, including the benchmark harness.

Duration
6-8 weeks
Pricing
Fixed fee
  • Working agent on your hardware
  • Latency harness and results
  • Go or no-go report

How do we get this into production properly?

Implementation

Telephony integration, CRM and core system wiring, escalation paths, failure modes, load testing and tail-latency tuning. Ends with a handover your platform team can operate without us.

Duration
8-16 weeks
Pricing
Fixed scope
  • Production deployment
  • Runbooks and dashboards
  • Team handover

Who keeps it running?

Support retainer

Model updates, drift monitoring, tuning as your call mix changes, and an escalation path. Optional by design. The system is built so you can decline this and still run it.

Duration
Monthly
Pricing
Optional
  • Monitoring and alerting
  • Quarterly tuning pass
  • Named escalation contact

Stack

Named, because it is checkable.

Set as text rather than a wall of logos. If you want to verify what we deploy before you speak to us, this is enough to do it.

Telephony

  • Asterisk
  • FreeSWITCH
  • Kamailio
  • SIP / RTP
  • G.711, Opus

Speech recognition

  • Whisper
  • faster-whisper
  • NVIDIA Parakeet
  • NVIDIA Riva
  • Silero VAD

Synthesis

  • Kokoro
  • Piper
  • XTTS
  • NVIDIA Riva TTS

Inference

  • vLLM
  • NVIDIA Triton
  • TensorRT-LLM
  • Ollama

Orchestration

  • Pipecat
  • LiveKit Agents
  • Temporal

Platform

  • Kubernetes
  • Docker
  • Prometheus
  • Grafana
  • OpenTelemetry

MethodNamed because it is checkable. Every component here is open source or self-hostable under a license that permits commercial deployment, which is what makes an air-gapped install possible and what stops you being locked to us.

Method of work

How an engagement actually runs.

  1. 01

    Scope and latency budget

    We pick the call flows worth automating and fix the latency target. Every engineering decision afterwards is argued against that number, and we report against it rather than around it.

    Artefact

    Written budget, agreed before build

  2. 02

    Thin slice on your hardware

    A narrow deployment on a small share of live traffic. The point is to find out early where the stack breaks on your call mix, your accents and your line quality.

    Artefact

    Working agent, one flow, real calls

  3. 03

    Integrate and harden

    Telephony, CRM, escalation and the cases where the agent should hand off to a person. We tune until the tail behaves, not until the average looks good.

    Artefact

    Load test results, failure-mode notes

  4. 04

    Handover

    Your platform team operates it. We document the failure modes we hit and how we fixed them, including the ones that were our fault.

    Artefact

    Runbooks, dashboards, training

Against our own interest

When we are not a fit.

On-premises voice AI has a break-even point. Below it, a hosted API is cheaper and you should use one. Here is the arithmetic we use, so you can run it yourself before you call.

A GPU node sized for ~40 concurrent calls
Capital cost, amortized
Plus deployment, integration and handover
One-time
Against a hosted API at per-minute billing
Scales with volume

Under roughly 50-60 sustained concurrent calls, and with no regulatory requirement forcing data residency, the hosted API usually wins on total cost. We will say so.

Do not call us if

  • You want a demo agent live this week.
  • Your call volume is low and nothing rules out a hosted API.
  • You want us to own and operate it indefinitely.
  • You are looking for BPO or contact-center staffing rather than engineering.

Worth a call if

  • HIPAA, PCI or a client contract rules out a third-party processor.
  • Per-minute cloud billing has outgrown the hardware.
  • You need to tune on your own call recordings.
  • Your network is isolated and must stay that way.

Compliance

What the rules actually require, and which of them reach us.

Most vendors publish a badge row. The useful thing is to separate obligations that bind us directly, from ones that reach us through your contract, from ones where we only supply the technical means for you to meet your own duty.

  • Binds Ribonic directly
  • Reaches us through your contract
  • We provide the technical means
HIPAA / HITECH
We sign a BAA and operate as your business associate. On-premises deployment removes the third-party processor and cross-border transfer questions from your risk assessment entirely.
PCI DSS v4.0
Card data spoken on a call is in scope. Keeping ASR and storage inside your CDE avoids extending scope to an external processor, and pause-and-resume on capture is handled at the media layer.
TCPA and state call-recording law
Two-party consent applies in California, Florida, Illinois, Pennsylvania, Washington and others. Disclosure, consent capture and per-state routing are configured in the call flow, not bolted on afterward.
NYDFS 23 NYCRR Part 500
Reaches us as a third-party service provider to covered financial entities. Access control, MFA and audit trail requirements shape anything we deploy into your estate.
GLBA Safeguards Rule
On-premises processing keeps customer financial information within your own safeguards program rather than extending it to a vendor's cloud.
SEC Rule 17a-4 / FINRA 4511
Where call records are books and records, retention runs on your WORM storage under your existing retention schedule. We do not hold the record.
CCPA / CPRA and state privacy laws
Deletion and access requests are satisfied against your own systems. There is no vendor-side copy to chase.
SOC 2 Type II
An attestation, not a certification. See the note below on where we actually stand.

Ribonic does not currently hold a SOC 2 Type II attestation. We would rather say that than imply otherwise, and we will complete your security questionnaire in writing without a sales call. For an on-premises deployment the honest answer to much of it is that the data never leaves your rack.

Contact

Tell us what your call flows look like.

A technical call, not a discovery call. Bring your volumes, your telephony and your constraints, and we will tell you whether this is worth doing, including when it is not.

Book directly
Pick a slot
Response window
One business day

What happens next

  1. 01Pick a slot, or send call volumes, telephony and any regulatory constraint.
  2. 02We reply with whether this is worth doing, in writing.
  3. 03If it is, we scope a feasibility review with a fixed fee.