Loading...
Where your files live, what actually gets sent, and what the AI can and cannot do, organized by area.
Our core users include lawyers, accountants, teachers, and public institutions that handle genuinely sensitive information. That is why the entire architecture was designed from the start to keep your data safe.
The files you work on, the conversations you have, and the execution logs all stay on your computer.
inline AI opens, reads, and edits files directly on your computer. Because the work itself happens on your machine, your original files are never uploaded to the cloud.
Actions like browsing files and editing documents are carried out directly by an isolated execution module on your computer. Because the code runs on your machine, documents never have to leave it.
Your conversations and tool-execution logs are all stored only in a local folder on your computer, and they never leave it.
The AI only plans what to do. The actual work runs only within the scope you allow and approve.
The AI model only plans what to do, while a separate execution module handles the actual file operations. Because the model never operates your computer directly, a wrong decision doesn't automatically become an action.
The tools the AI can use are limited to those registered in inline AI. If a tool is not one we built, the call is automatically blocked before it reaches the execution module, even if the AI tries to invoke it.
inline AI works only in the folders you explicitly allow and their subpaths. Folders or files you have not allowed simply cannot be touched.
Hard-to-undo actions like changing files or editing documents bring up an on-screen approval request and do not run until you confirm. Only safe actions like reading documents proceed without approval.
inline AI never asks for admin rights and runs only within the OS permissions of the user who launched the app. If you can't access a file, neither can inline AI.
Sensitive operations like Office automation or file-system access run in a child process isolated from the main app, spawned independently for each session. A problem in one task does not spread to another task or to the whole app.
inline AI never uses macros or VBA, especially for Excel work. Because it does not embed executable code in your documents, there's no macro-based malware and no security warnings to worry about.
Standard encryption protects both stored records and traffic in transit, and sensitive values are masked as they are written.
Chat history saved on your computer is fully encrypted with AES-256-GCM, so you cannot make out the contents even if you open the file directly.
The data encryption key (DEK) is kept in the Windows credential store (DPAPI). Even on the same computer, the records cannot be decrypted under a different Windows account.
A session identifier is used as additional authenticated data (AAD) to stop block-swapping attacks between files, and path-traversal defense is built in by default.
Tool-execution logs are encrypted the same way as your chat history, and sensitive credentials like passwords and tokens are masked automatically before they are written.
Traffic exchanged for AI inference is encrypted with TLS 1.2 or higher, so it stays unreadable even if intercepted along the way.
Only the minimal context needed for inference is sent, and nothing is kept once processing is done.
Inference receives only the context needed for the task, not your entire file. We limit what gets sent so no more data leaves than necessary.
When you do web research, only the search query you need goes out (e.g., "May 15 news") - never the contents of your document. Nothing else in the file you're working on is ever sent to a search engine or an external site.
We have signed Zero Data Retention (ZDR) agreements with model providers like Anthropic and OpenAI. Data used for inference is discarded immediately after the AI model finishes processing. Contact our support team for questions about these agreements.
The data you exchange is never used to train or fine-tune any AI model. Your work never flows into the next version of a model.