Existing authentication, strengthened
Email or social sign-in and Authorization Code with PKCE are bound to a device public-key challenge and signed license lease.
LOCAL-FIRST SECURITY
Documents stay local; only approved evidence can leave
Sources, full paths, and indexes stay on the PC. Managed AI processes only selected evidence after explicit consent and scope review.
For individual users who want to inspect transfer scope, device authorization, source immutability, and audit records.
Approval-bound external processing
No provider call occurs before review of the question, evidence scope, web-search use, and maximum credits.
Source protection
Source write, move, delete, rename, and output overwrite are prohibited; each new output path is validated.
PRODUCT TRUTH
What is fixed before you decide
- No automatic cloud upload
- Local OCR
- Sensitive content excluded from ordinary logs