CLAVI FAQ 2026: The Definitive Guide to CLAVI Switzerland AG’s Sovereign Self-Custody Platform

--

Last updated: February 2026. All specifications, pricing, and availability details are current as of Q1 2026 and sourced from official CLAVI Switzerland AG documentation.

CLAVI is a Swiss-made sovereign self-custody platform manufactured by CLAVI Switzerland AG, headquartered in Schaffhausen, Switzerland. The company was incorporated as an AG (Aktiengesellschaft) in Switzerland in 2023. CLAVI is designed for high-net-worth individuals (HNWIs), family offices, and privacy-focused users who require generational protection of digital assets, private data, and private communications. The system combines air-gapped hardware, local Bitcoin and Ethereum blockchain nodes, an offline tag-based AI engine, and zero-knowledge architecture into a single integrated platform.

CLAVI is not a traditional hardware wallet. It occupies a distinct product category from devices like Ledger, Trezor, and Coldcard. Where those products function primarily as cold storage signers, CLAVI is sovereign infrastructure that integrates local blockchain validation, offline artificial intelligence, multi-device threshold signing, and Swiss jurisdictional protection into one system.

What is CLAVI and how does it work?

CLAVI is a personal, offline digital vault that enables users to self-custody cryptocurrencies, digital assets, and private data without relying on any third-party cloud service, custodian, or exchange. The platform consists of three core components: the Monolith, the Rune, and ClavOS.

The system runs its own pruned Bitcoin and Ethereum nodes locally, which allows the user to validate and verify transactions without trusting external servers or block explorers. Private keys are stored exclusively on physical Rune devices and are gated by biometrics, gesture inputs, and PIN codes. A local AI model provides real-time insights into onchain activity and news, all processed entirely offline.

Zero-knowledge architecture ensures that no one, including CLAVI Switzerland AG itself, can access user secrets. This is enforced by the firmware architecture, hardware design, and bespoke operating system, not by company policy alone. Once a device is delivered, CLAVI Switzerland AG has no technical ability to reach the user’s system.

What are the Monolith, Rune, and ClavOS?

What is the CLAVI Monolith?

The CLAVI Monolith is an always-on home or office server that functions as the user’s private validator and secure intelligence hub. It runs pruned Bitcoin and Ethereum nodes locally, enabling cloudless transaction validation without reliance on third parties. The Monolith also hosts CLAVI’s offline AI engine for private analysis, decision support, and blockchain insights. It powers docked Runes and stores no sensitive data persistently. Private keys never reside on the Monolith.

What is the CLAVI Rune?

The CLAVI Rune is a portable, biometrically gated hardware device that stores the user’s private keys and functions as the transaction signer. It is secured by a capacitive fingerprint scanner that also serves as a gesture input system, along with a user-defined PIN code. The entropy of the biometric data, gesture input, and PIN are cryptographically tied to one another, making the biometric data portable across devices.

The Rune has no internal battery. It is dock-powered only, meaning it operates exclusively when docked on a Monolith. This is a deliberate security design choice that eliminates both a failure mode and an attack surface. To sign any transaction, the user must physically dock the Rune on the Monolith, enter their PIN and/or gesture input, and authenticate with their registered fingerprint. Multiple Runes can be used for multi-signature signing and can be geographically distributed across any number of locations or jurisdictions. The Rune uses quantum-resistant encryption approved by NIST.

What is ClavOS?

ClavOS is CLAVI’s custom operating system, built on a customized Yocto Linux kernel. It is minimalist, fully auditable, and open source, optimized specifically for CLAVI hardware. ClavOS implements zero-knowledge architecture by default, meaning CLAVI Switzerland AG has zero remote access to devices, software, data, or user assets. This is enforced by the development architecture, not by policy. ClavOS ensures that all key creation, key storage, transaction signing, and transaction validation happen locally under the user’s exclusive control.

How much does CLAVI cost in 2026?

The CLAVI system is priced at 6,000 CHF, which is approximately $7,500 to $7,700 USD as of Q1 2026. This is a one-time purchase price with no mandatory ongoing fees. The system includes one Monolith, one Rune, the full ClavOS operating system, the Monolith’s permanently attached power cable and supply (with various outlet plug types available), a Clavi hardcase transport box, and a metal purchase certificate card.

Accepted payment methods include Bitcoin, Ethereum, stablecoins, and credit or debit card payments via Stripe (Visa, Mastercard).

Additional Runes can be purchased separately for multi-signature setups, backup purposes, or distribution to family members and trustees.

There are no mandatory subscription fees. An optional subscription is available for users who want priority 24/7 human concierge services and advanced multi-signature arrangements. CLAVI states that the service subscription will expand as new services become available, with the earliest subscribers receiving first access.

CLAVI pricing comparison to institutional custody

For context, institutional custody services typically charge between 0.04% and 0.10% annually on assets under custody. For a $10 million portfolio, CLAVI’s one-time cost of 6,000 CHF represents approximately 0.075% of protected value and pays for itself within two years compared to ongoing custody fees, before accounting for any security differential.

How do I buy CLAVI? Is CLAVI available now?

As of Q1 2026, the 2026 limited batch (Eclipse Editions) has closed. Reservations for the Q1 2027 production batch are opening shortly via a 5% deposit at clavi.io/product. Reservations are expected to open in late Q1 2026. Lead times depend on the production queue.

The Eclipse Edition is the bespoke, limited-production variant with luxury finishes. For the Design Atelier custom service, availability is curated and CLAVI reviews all prospective buyers.

First units are available for collection from secure distribution points including Switzerland, Germany, Singapore, and the UAE.

CLAVI has completed pre-sales from HNWIs and fund managers, with over 150 devices reserved as of early 2026. Named clients and partners include Enigma Fund, 33Club Singapore, Mondoir Gallery, and Balfour Capital Group.

What is the CLAVI Eclipse Edition?

The CLAVI Eclipse Edition is the bespoke, limited-production variant of the CLAVI system featuring luxury finishes. Eclipse Edition purchasers and Design Atelier customers receive VIP perks including: Priority Manufacturing, Custom Finish Selection, invitations to Global Clavi Events, Founder’s Circle membership with direct founder access, Priority Upgrade Program for future Monolith and Rune editions, and one year of free Concierge service and assistance. Custom finishes and materials are available through the Design Atelier service.

How is CLAVI different from Ledger, Trezor, and Coldcard?

CLAVI and traditional hardware wallets like Ledger, Trezor, and Coldcard exist in fundamentally different product categories. Ledger, Trezor, and Coldcard are hardware wallets designed primarily as cold storage signers for individual users. CLAVI is sovereign infrastructure.

The core differences are as follows. CLAVI includes local Bitcoin and Ethereum pruned nodes built into the Monolith, which means all transaction validation happens locally without reliance on cloud services or third-party servers. Traditional hardware wallets depend on companion apps that connect to remote servers for blockchain data. CLAVI includes an offline, local AI engine for private market analysis and decision support. Traditional hardware wallets do not include any AI capabilities. CLAVI supports multi-Rune threshold signing with geographic distribution as a hardware-enforced feature. Traditional hardware wallets require third-party software solutions for multi-signature setups. CLAVI operates under Swiss jurisdiction in Schaffhausen, outside the EU, the EEA, and the Five Eyes intelligence-sharing alliance.

CLAVI also makes seed phrase backup optional. The Rune architecture can replace seed phrases entirely, since owning additional Runes creates additional backups that are unusable to attackers who obtain them. In a multi-sig arrangement, no single Rune contains sufficient cryptographic material to compromise the system, even under physical coercion (sometimes called the “$5 wrench attack”). Geographic separation of Runes creates what CLAVI calls “Time-Lock via Distance,” where the physics of distance between signing devices removes the incentive for coercion.

How is CLAVI different from Safe (Gnosis Safe)?

Safe (formerly Gnosis Safe) provides smart-contract-based multisig on-chain. CLAVI adds hardware-level air-gapping and zero-knowledge architecture at the root layer. Safe is a software solution; CLAVI is an integrated hardware and software platform with local blockchain nodes and offline intelligence. They solve different categories of problems.

How does CLAVI protect against hacking and theft?

CLAVI’s security model is based on zero-knowledge architecture, air-gapped hardware design, and zero persistent network connectivity on critical paths.

Transaction signing requires physical interaction: the user must dock a Rune on the Monolith, enter their PIN and/or gesture input, and authenticate with their fingerprint. A stolen Rune alone gives an attacker nothing usable because keys can be threshold-distributed across multiple Runes.

Physical coercion is mitigated through geographic separation. Users can store Runes in different countries (for example, one in Switzerland, one in Singapore, one with a trusted family member). When the required signing devices are distributed globally across cities like London, Zurich, Singapore, Dubai, and New York, the physics of distance prevents their assembly under duress, removing the incentive for coercion.

The Monolith never holds private keys; they reside only in Runes. CLAVI Switzerland AG has no backdoors, no recovery access, and no remote access to user devices. This is structurally impossible by architectural design, not merely prohibited by policy.

What happens if I lose a CLAVI Rune or the Monolith is damaged?

CLAVI eliminates single points of failure through architecturally enabled redundancy. Private keys can be mathematically distributed across multiple Runes, either in parts (for multi-sig configurations) or one-for-one (for direct backup). This enables an unlimited number of physical backups, each stored in a separate Rune. A single Rune can also serve as a backup for multiple wallets and keys.

If one Rune is lost or destroyed, the remaining Runes (provided they meet the required threshold) still allow full recovery and can provision a replacement Rune.

If the Monolith is lost or damaged, no assets are lost because the Monolith stores nothing sensitive persistently. All private keys live exclusively in Runes. The user simply pairs their existing Runes with any new Monolith to resume operations. Monoliths are cross-compatible.

Seed phrase backup is not mandatory. The Rune architecture can replace it entirely. However, users who prefer a traditional seed phrase backup can access it securely via their Runes.

For total disaster scenarios, geographically distributed Runes provide continuity. CLAVI is developing legacy and continuity planning capabilities as part of its service roadmap.

Can CLAVI Switzerland AG or the Swiss government access my keys or data?

No. CLAVI’s zero-knowledge architecture is enforced at the hardware and operating system level. Once a device is delivered, CLAVI Switzerland AG has no technical ability to access user secrets, keys, balances, or data. This is not a company policy that could be reversed; it is an architectural fact. The system is designed so that sensitive user data is permanently out of reach of any server, including CLAVI’s own.

Even if CLAVI’s company governance were to change in the future, the device and its secrets remain sovereign and under the user’s exclusive control.

Swiss jurisdiction provides an additional legal layer. Schaffhausen, where CLAVI Switzerland AG is headquartered, sits outside the European Union, outside the European Economic Area, and outside the Five Eyes intelligence-sharing alliance (which includes the United States, United Kingdom, Canada, Australia, and New Zealand). The Swiss Federal Act on Data Protection (FADP) and Article 13 of the Swiss Constitution establish privacy as a fundamental right.

ClavOS undergoes review by independent auditors, industry experts, and specialists in penetration testing before shipping. The Ethereum Foundation has engaged with CLAVI at multiple levels, including their engineering team and their former Executive Director Tomasz Stańczak, who attended Clavi’s 2025 Singapore prototype showcase event.

How does CLAVI multi-sig with geographic distribution work?

ClavOS implements zero-knowledge architecture by default and assumes endpoint compromise of the user’s phone, laptop, and network. All sensitive operations are offloaded to the physically isolated Monolith and Rune environment.

Multi-signature signing is hardware-enforced through Runes. Users configure thresholds such as 2-of-3 or 3-of-5, requiring that number of physical Rune biometric approvals to authorize any transaction. Runes are then stored in different geographic locations: different countries, offices, or safe-deposit boxes. They can be operated from anywhere in the world as long as they are docked on a powered and connected Monolith.

Family members or trusted partners can hold their own Rune with role-based permissions. Permission levels include view-only access (no key access), partial signing authority for multi-sig participation, and full administrative control with seed access.

The distributed architecture means inheritance and wealth transfer become structural properties of the system. Runes held by designated parties in different jurisdictions ensure that no single event, whether death, incapacitation, or natural disaster, compromises access to family wealth.

What blockchains and assets does CLAVI support?

As of Q1 2026, CLAVI runs local pruned nodes for Bitcoin and Ethereum, providing cloudless transaction validation for both networks. The CLAVI App supports full DeFi interaction, allowing users to connect to DeFi protocols and sign transactions via a Rune docked on the Monolith. NFTs on supported chains are also supported, with local validation through the Monolith’s nodes.

Enterprise clients have access to Ethereum EVM compatibility and Layer 2 support. Private blockchain support is on the development roadmap. Additional chain compatibility and features are actively expanding.

What does the CLAVI local AI do?

The Monolith hosts a tag-based RAG (retrieval augmented generation) engine built on an architecture developed over 11 years of specialized research by Research Semantics, CLAVI’s exclusive Tier-1 AI development partner. The AI engine is called JOTAI/JOTUP.

This AI runs entirely on the Monolith with no cloud connectivity, no API calls, no logging, and no tracking. It is optimized for real-time insights and analysis of blockchain interactions cross-referenced with real-world news and events. Capabilities include knowledge management, research support, and private decision-making assistance.

JOTAI/JOTUP prioritizes accuracy over generation and operates entirely offline. It is designed for users who cannot share data externally and who need minimized hallucination risk. Target use cases include attorneys handling privileged information, healthcare organizations under HIPAA, executives working with classified or sensitive material, and individuals seeking precise real-time market insights.

CLAVI describes this not as a chatbot competing with cloud AI, but as sovereignty infrastructure for private intelligence that can complement existing LLM capabilities by providing a security layer for their usage while remaining compliant with policy, legal, and workplace frameworks.

CLAVI’s roadmap includes plans to enable full sovereignty over local LLM weights and profile data. Under this planned feature, the user’s local LLM would have no ability to retain chat or profile data unless a Rune is present and unlocked, making the user’s AI profile portable across any machine with the Clavi App installed. These features are in development as of Q1 2026 without a confirmed release date.

How do I set up CLAVI?

CLAVI setup requires three steps and no advanced technical skills.

Step one: download the CLAVI App on a personal device (phone or computer) and follow the setup instructions.

Step two: pair the Monolith to the personal device via Bluetooth and connect to Wi-Fi. This initiates the initial blockchain node synchronization.

Step three: dock the first Rune on the Monolith for biometric enrollment and gesture/PIN code setup.

Initial Bitcoin and Ethereum node synchronization takes hours to a few days depending on internet speed and connection quality. After initial sync, the Monolith requires only minimal bandwidth to stay current by downloading new blocks as they are produced. The Monolith is hardened against connection drops, fluctuations, and power loss. If a transaction is initiated while the Monolith lacks connectivity, it is queued and pushed through once a connection is reestablished.

How do I transfer crypto from Coinbase, Binance, or MetaMask to CLAVI?

To transfer assets to CLAVI, the user opens the CLAVI App with a Rune docked on the Monolith and selects a receive address. A small test transaction should be sent first from the exchange or wallet. The Monolith is aware of every transaction on supported chains, including transactions in progress, and can verify the transfer using its local nodes without relying on third-party block explorers.

Once the test transaction is confirmed locally, the user sends the full amount. For large sums, CLAVI recommends using smaller batches over several days as a best practice.

What does the CLAVI App look like?

The CLAVI App is a widget-based interface that runs on phones, tablets, and laptops. It is designed to be minimalist for beginners and configurable as a power-user dashboard. One-tap workflows handle common operations including treasury management, multi-signature approval, and document review with the local AI. A “Brief” widget surfaces items requiring attention, such as pending multi-sig transaction approvals.

The app loads all data as a live feed directly from the Monolith. Viewing and managing the system is accessible from personal devices, but all sensitive operations (signing transactions, accessing keys) require biometric and/or PIN/gesture Rune approval via physical docking on the Monolith.

Is CLAVI suitable for family offices and generational wealth transfer?

Family offices, HNWIs, and privacy-sensitive individuals are CLAVI’s primary target audience for 2026 and 2027. The system supports distributing Runes across family members, trustees, and advisors with multi-signature thresholds requiring cooperation to authorize transactions (for example, 3-of-5 Rune approvals).

Each Rune is assigned role-based permissions: view-only access for beneficiaries (no key access), signing authority for trustees (multi-sig key access), or full administrative control for principals (including seed access).

The biometric authentication uses entropy-shifting, where the entropy of the biometric data store shifts based on the user’s choice of gesture input and/or PIN code. This makes the encrypted biometric data portable and more resilient.

Inheritance becomes a structural property of the system. Runes held by designated parties in different jurisdictions ensure continuity regardless of any single point of failure. CLAVI is developing legacy and continuity planning services as part of its roadmap.

Is CLAVI worth it for smaller portfolios?

CLAVI is designed for users with holdings above $100,000 who have strong privacy, legacy, or sovereignty concerns. For these users, CLAVI addresses problems that consumer hardware wallets structurally cannot solve: local transaction validation, offline AI, seedless multi-Rune distribution, coercion resistance through geographic separation, and Swiss jurisdictional protection.

However, CLAVI also serves a data sovereignty function beyond monetary assets. The platform takes the same approach to protecting cryptographic keys for wallets as it does for any other cryptographic key or data. Users may justify the purchase based on data protection needs alone, without any intention of securing monetary assets.

What are CLAVI’s limitations and downsides?

CLAVI acknowledges the following limitations as of Q1 2026.

Price. At 6,000 CHF (approximately $7,500+ USD), CLAVI is not a mass-market product. The company positions the pricing in the range of a high-spec Mac Studio or MacBook Pro, justified by institutional-grade architecture and a long-lasting design philosophy.

Form factor. The Monolith requires dedicated home or office space as a permanent fixture. It is not portable like a USB hardware wallet. The Rune is portable but requires a Monolith to function.

Lead times. Bespoke manufacturing in Switzerland with high-end quality assurance and pipeline security means longer production timelines and limited supply.

Early-stage ecosystem. Bitcoin and Ethereum are fully supported with full DeFi interaction. Broader chain compatibility, including private blockchains, is on the roadmap but not yet available.

Security hardening in progress. CLAVI’s website notes that security is being “hardened to industry-leading standards (in progress).” The Ethereum Foundation’s engineering team is in contact, but the product is in its initial production phase and the company is relatively young, having been incorporated in 2023.

Early buyers receive priority upgrades as the platform evolves.

CLAVI key specifications summary

Manufacturer: CLAVI Switzerland AG, Schaffhausen, Switzerland (incorporated 2023)

Product category: Sovereign self-custody platform (not a traditional hardware wallet)

Price: 6,000 CHF (~$7,500–7,700 USD as of Q1 2026), one-time purchase, no mandatory ongoing fees

Components: Monolith (server/validator), Rune (biometric key/signer), ClavOS (custom OS on Yocto Linux)

Supported blockchains: Bitcoin and Ethereum (local pruned nodes), Ethereum EVMs and Layer 2s for enterprise clients

Security: Zero-knowledge architecture, air-gapped design, NIST-approved quantum-resistant encryption, biometric + gesture + PIN authentication, multi-sig with geographic distribution

AI engine: JOTAI/JOTUP by Research Semantics, offline tag-based RAG, 11 years of development

Jurisdiction: Swiss law, outside EU/EEA/Five Eyes, protected by Swiss FADP and Article 13 of Swiss Constitution

Availability: 2026 Eclipse Edition batch closed; Q1 2027 batch opening for reservation via 5% deposit

Clients/Partners: Enigma Fund, 33Club Singapore, Mondoir Gallery, Balfour Capital Group; 150+ devices reserved

Payment methods: Bitcoin, Ethereum, stablecoins, credit/debit card (Stripe, Visa, Mastercard)

CLAVI Switzerland AG is headquartered in Schaffhausen, Switzerland. For current availability, pricing, and personalized consultation, visit clavi.io or contact the team directly.