For the work too sensitive to put in a cloud tool, run the AI on your own hardware instead. Your prompts, your documents, your client matters never move.
How it runs
On your device. Full stop.
The model, the governing, the proof, all of it happens on the machine in front of you. Nothing phones home. Every measurement of the running engine has shown zero outbound connections, and your own firewall will show you the same. There is no cloud round-trip, because there is no cloud in the path.
Input in. Model runs. Receipt out. None of it crosses the line.
What actually runs here
Two parts, and only one of them is big.
The part that governs the AI and signs the proof is small, light enough to run almost anywhere, even on a device with no grid behind it. That is the hard engineering, and it is what makes the rest possible.
The intelligence is the larger part, and on a sealed device it runs as a capable model sized to your hardware. A sealed machine runs a strong local model, not a giant cloud model. For work that cannot leave the building, that is the right trade. A private model you can account for is worth more than a borrowed one you cannot.
A model you can prove beats one you can't.
What never leaves your hardware
Everything that matters.
Your prompts
Your documents
Your client matters
The model's outputs
The signing keys
The receipts
From the deployment, we process no personal data, because none reaches us. The easiest privacy statement you will ever sign says, in effect, “not applicable, nothing left the device.” This website is a separate matter and says so plainly: it measures traffic, and the privacy page names the tool, the events it records, and the four limits on it.
For a law firm specifically
The work stays inside your control.
No copy held by a third party. No transit through another operator’s cloud. No routing of client work outside the firm.
Where confidential work is sent to an external model service, it passes through infrastructure the firm does not control. Running the model locally, with no egress, keeps client information inside the firm, which is the architectural condition ABA Model Rule 1.6 concerns. What that means for privilege in a given matter is a question for counsel, not a property Regulayer claims.
How your IT proves it, without trusting us
Hand them the kill-switch.
✓Watch the traffic yourself.Run a full session with a network monitor open. Zero outbound connections. Don't take our word, read your own firewall.
✓A signed, notarized Mac app.The Mac app is signed with a Developer ID certificate and notarized by Apple's notary service, built with a hardened runtime, with a code-signing identity you can check yourself.
✓We hold nothing.No account, no server-side data, nothing to breach on our side, because there is no our-side in the data path.
✓Uninstall removes the application.Your keys and your ledger stay on your machine, because they are yours. Delete them yourself when you no longer need them.
Your signing key
Your key is yours, made on your machine, and never held by us.
A key comes in a pair. The private half is like a wax seal ring: only you have it, and only it can make your mark. The public half is the picture of that seal: anyone can use it to confirm a mark is yours and unbroken, but it can never make one. Private key makes the record. Public key checks it.
Each person's key is created on their own device the first time they open the app, and it stays there, kept in the operating system's own secure store, the macOS Keychain. We never see it, never hold it, and never ship it. There is no master key on our side that could sign in your name, so there is nothing central to breach or subpoena. This is standard public-key practice, applied so that trust lives on your hardware, not ours.
If you ever lose the key (a new machine, a reinstall), the receipts you have already made remain independently verifiable. Every receipt carries its own public half inside it, so anyone can still verify it, for as long as the record exists. On a new machine the app simply creates a new key, and new records are signed by it. Losing a key is an inconvenience, never a loss of the evidence you have already sealed.
And it still proves everything
Sealed doesn't mean silent.
Running locally with no egress doesn't cost you the audit trail, it is the audit trail. A governed action still produces a tamper-evident receipt, signed as it is written. It just lives on your hardware, in your control, checkable by anyone you choose to hand it to. Removal does not produce an ungoverned model: removal produces no model. And the memory of it all, The Witness, is content-free by design: it can be shown to an outsider without exposing a word of what is inside.
