ideacheck
Enterprise AIYC Winter 2027 RFS · November 2026

AI for the Air-Gapped Economy: what YC wants and how to validate it

Original request by Brad Flora, Y Combinator. Source: YC Requests for Startups.

The request in plain English

Defense contractors, banks, hospitals, and nuclear plants keep their most valuable data offline and cannot use cloud AI APIs. YC wants companies that bring AI fully inside those buildings: on-prem models, deployment tools, security accreditation, and hardware.

What YC's request says

  • Named customers: defense contractors, banks, hospitals, and nuclear plants.
  • These organizations want AI that runs entirely inside their own facilities.
  • YC expects slower, harder sales, but large budgets and defensible businesses.

Why now

Open-weight models are now good enough for a lot of real work, and the hardware to run them on-site is available. That removes the main technical reason these organizations could not adopt AI.

What remains is everything around the model: installing it, updating it, securing it, proving to auditors that data never leaves, and making it useful for specific workflows. That operational layer is where startups fit.

Why the hard sale is the moat

Security accreditation, procurement, and on-site deployment are slow. That keeps most competitors out. Once you are approved and installed, switching costs are high and contracts tend to be long.

The trade-off is runway. Founders need to plan for long sales cycles and should look for early customers with urgent needs and the authority to move faster.

Three startup ideas to start from

AI appliance for regulated sites

Pre-configured hardware and models that install inside the customer's network and pass security review out of the box.

Model update pipeline for disconnected networks

Securely deliver, test, and roll out model updates to sites with no internet connection.

Accreditation as a service

Help AI vendors get the security certifications they need to sell to defense and other regulated buyers.

How to validate it before you build

  1. Find the internal champion, often a CISO or head of innovation, who has an approved budget and a blocked use case.
  2. List the exact certifications your target buyer requires, and estimate the time and cost to get them.
  3. Pilot one narrow workflow on-site, such as document search or report drafting, and measure time saved.
  4. Confirm who maintains the system after installation. Support burden decides your margins.

The founder trap

Running out of money during the first sales cycle. Pick early customers where the need is urgent, and consider partnering with an established contractor to borrow their accreditation and access.

IdeaCheck's take

Deep pockets and strong lock-in, offset by slow sales. Founders with defense, healthcare IT, or bank security backgrounds have a big advantage.

Test your version

Check your idea against Hacker News

Building something in enterprise ai? See what 28,000 Hacker News threads say before you commit.

Your first evaluation is free with Google sign-in.