Existing authentication, strengthened
Email sign-in and Authorization Code with PKCE are bound to a device public-key challenge and signed license lease.
LOCAL-FIRST SECURITY
Documents stay local; only approved source reference can leave
Sources, full paths, and indexes stay on the PC. Managed AI processes only selected source reference after explicit consent and scope review.
For individual users who want to inspect transfer scope, device authorization, source immutability, and audit records.
Approval-bound external processing
No external-processing service call occurs before review of the question, source reference scope, web-search use, and maximum credits.
Source protection
Source write, move, delete, rename, and output overwrite are prohibited; each new output path is validated.
PRODUCT TRUTH
What is fixed before you decide
- No automatic cloud upload
- Local OCR
- Sensitive content excluded from ordinary logs