Sovereign by architecture.Anonymous by default.

Infrastructure control

• Run on your machine, cloud tenant, or dedicated server
• Zero data ever leaves your environment
• End-to-end encryption at rest and in transit

Storage ownership

• Documents live exclusively on your infrastructure
• No vendor lock-in — export or migrate anytime
• BYOS: bring your own storage (S3, Azure Blob, GCS)

Compliance ready

• ISO 27001, SOC 2, GDPR, HIPAA-aligned architecture
• Australian & EU data residency options
• Full audit trail with immutable logs

Privacy by design

• Desktop mode: fully anonymous, zero login required
• No account profiling or behavioral fingerprinting
• Enterprise: SAML SSO without identity leakage

Model privacy

• Cloud queries never train or fine-tune AI models
• Zero prompt logging or conversation retention
• Cryptographic proof of non-retention on request

Identity isolation

• Separate identity per workspace — no cross-space correlation
• Anonymous session tokens, rotated per request
• PII scrubbing before any external model call

Model flexibility

• OpenAI, Anthropic, Gemini, Llama, Mistral and more
• Swap models without re-uploading documents
• Local LLMs via Ollama — fully air-gapped

Access control

• Fine-grained RBAC for model access per space
• Admin-enforced model policies per department
• Per-user model allow/block lists

Query isolation

• Each query isolated — no cross-user context bleed
• Retrieval sandboxed to your documents only
• API keys never exposed to end users

Enterprise integration

• SSO, LDAP, SAML 2.0 out of the box
• Full REST API for programmatic control
• Webhook integrations with any platform

Administration

• Multi-tenant workspace isolation
• Role-based access across departments and teams
• Programmatic provisioning and de-provisioning

Observability

• Immutable audit logs with e-discovery support
• Usage analytics per user, team, and model
• Real-time compliance dashboards

Extraction with provenance

• Drop PDFs, contracts, invoices — get typed rows
• Per-cell citation: source document + page + character offset
• Click any value → highlighted PDF deep-link opens

Trust by construction

• Real evidence-grounded confidence (not a fake 0.85)
• Auto-verified vs needs-review states per cell
• Cell-level comments + reviewer assignments with due dates

Publish as app

• One-click "Publish" turns any table into a public dashboard
• Sovereignty mode: published app boots with OPENAI_API_KEY unset
• Export the whole dashboard to PDF or CSV for filing

Five pre-built schemas

• Discovery Batch — bates range, custodian, privilege, exhibit#
• Brief Evidence Map — claim, supporting doc, page, paragraph
• Contract Registry — vendor, term, AUD value, auto-renew, notice

Also included

• NDA Tracker — parties, effective date, mutual, expiry
• Case File Index — matter#, jurisdiction (NSW/VIC/...), practice area
• Realistic-but-fake seed data so the demo lands in seconds

Built for AU practice

• AustLII-style references in sample data
• AUD currency formatting throughout
• NSW Supreme Court / Federal Court jurisdictions out of the box

Shared, scoped workspaces

• Per-team Spaces with their own vault, chat history, and notes
• Invite by email; granular role per Space (viewer / editor / owner)
• Spaces inherit the parent workspace's sovereignty mode

Cross-team without leakage

• Cross-vault search inside a Space — never leaks beyond its boundary
• Per-document sharing, not blanket folder permissions
• Threaded comments + reactions stay inside the Space

Sovereignty preserved

• Works in BYOK, Pro, or self-hosted — no "cloud-only" Spaces
• Per-Space data residency tagging for compliance
• Leaving a Space scrubs your access cleanly

On-device transcription

• Local Whisper inference — audio never uploaded to a third party
• Speaker diarisation with named participants
• Searchable transcripts indexed into your vault automatically

Action-ready summaries

• AI extracts decisions, action items, and owners
• Each item linked back to its timecode in the recording
• Export to Markdown, PDF, or hand-off to your task system

Privacy in the room

• Microphone gating — explicit opt-in per recording session
• Encrypted at rest in your local database
• Auto-delete after N days, configurable per workspace

Daily intelligence

• AI surfaces priorities from your vault + recent meeting notes
• Drag-and-drop scheduling with calendar awareness
• Carries unfinished work forward without nagging

Tied to your knowledge

• Each task can pull in source documents from your vault
• Decisions logged into the planner become searchable record
• Recurring patterns turn into local insights — no external analytics

Sovereign daily ledger

• Tasks stored locally, never on a planner SaaS
• Optional encrypted backup to your own storage (S3 / Blob / GCS)
• Export the whole plan to CSV any time you want

First-class writing surface

• Block-based editor with markdown + slash commands
• Inline citations from your vault while you write
• Per-note collaborators via Spaces

Indexed into super memory

• Notes are embedded and searchable across your whole vault
• AI can summarise, expand, or restructure on request
• Per-note privacy — keep some notes out of the search index

Encryption first

• Per-note keys derived from your workspace key
• Local-first sync — works offline by default
• Notes never leave your device unless you explicitly share

Open protocol

• MCP-compliant — point ZSearch at any MCP server
• No bespoke adapters; tools plug in without code changes
• Every tool call is auditable + revocable per session

Built-in connectors

• Filesystem, code repos, terminal — local from day one
• Drive / OneDrive / Notion via MCP gateways
• Custom MCP servers for internal databases and APIs

Sovereignty by default

• Tool transcripts stay on your machine
• Per-tool permission scopes (read-only by default)
• Air-gapped MCP mode for classified work

Local agent loop

• Mouse + keyboard + screenshot loop runs on-device
• Screenshots never leave your perimeter
• Resumable multi-step plans saved locally

Safety rails

• Per-action approval mode for sensitive flows
• Allow-list of apps + URLs per workspace
• Full reversible audit of every click and keystroke

Built for real work

• Multi-window research → typed notes, automatically
• Form-fill across desktop apps without sharing creds
• Hand off long browser flows to an agent, supervised