Security & data boundaries
Your environment. Deliberate control.
The intended product architecture keeps processing within approved data boundaries, with no cloud AI fallback, document telemetry, or unapproved synchronization. Local processing remains the default; approved enterprise connections would be designed separately. Explicit review gates control which facts reach a preview. Organizational access, encryption, retention, and recovery controls require separate design and validation; local processing alone is not a security assurance.