Sovereignty & Security · the part nobody else can copy

Local-first isn't a setting. It's the architecture.

The suite is engineered so the sensitive things physically stay with you — and so losing a password can't lose your company.

What leaves your machine: almost nothing.

Your files, databases, mail and keys stay on hardware you control. The only things the suite phones home for are a license check, an update offer, and a daily anonymous count — never your data. Delete us and the company you built is still on your disk, intact.

Two-key enrollment

A business install won't open until two USB security keys are enrolled. The backup IS the recovery path.

Sealed at rest

A Sovereign Lock wraps every secret under a key derived from your hardware — Argon2id + the OS enclave.

Your DID, portable

A decentralized identity on a key signs documents, sessions and servers. Roam, sign in, wipe on the way out.

Roles that hold

Seat licenses, employee types, drive clearances and kiosk lockdown — enforced locally, audited to a tamper-evident log.

Approval is the commit

When the AI acts, changes stage in an outbox and land only when you approve — with a 30-day revert.

No lock-in

Markdown at the core, standard exports throughout, databases you can query directly. You can always walk.