Built fail-safe.
When it is unsure, it asks. When it acts, you can see it.
You hold the controls.
A gate on anything irreversible. Send, schedule, share, pay: each one waits for your explicit approval. The gate, not the model, decides.
Autonomy is a dial, not a switch. You set how far it can go, per capability and per skill, starting from suggest-only.
One key stops everything. A kill switch that works instantly, every time, no questions asked.
A record of every action. Everything it does is logged as it happens, so "what did it do" always has an answer.
It listens and looks when you say so. Only then.
The mic is live only while you hold the key. There is no always-on listening and no wake word waiting in the dark. Companion mode reads your screen only when you ask, never in the background. Whenever it listens, records, or looks, the pill shows it, visibly, the entire time.
Guarded like it is ours to lose.
Isolated per user. Every record carries the account it belongs to, and our code checks it before reading or changing anything, so one account cannot reach another's data.
Credential encryption. Traffic to us and to providers uses TLS. Credentials are encrypted before storage with a single vault key when current versions save them. The local history database itself is not encrypted by Omega Ex; its protection depends on your computer, and we recommend FileVault on a Mac or BitLocker on Windows.
No staff access to content. Staff do not read your content, and our server diagnostic logs are designed to record timings, sizes and errors rather than your words. Your own activity history is different: it records what Omega Ex did for you, including details such as dictated text, links, and email recipients and subjects, and it is kept with the rest of your account's data.
No training on your data. We never train on your content, without qualification. The position for each AI provider is published on our Subprocessors page.
Secrets kept out of memory. In the memory facts it learns and the chat summaries its memory layer writes, the secrets it recognizes are replaced with [redacted] before they are saved: common API key and token formats, labeled passwords, card numbers, and US Social Security numbers written with dashes. It catches common formats, not every possible one. Everything else is kept as written, including your chats and meetings and the chat descriptions, recurring-topic notes, skill digests and meeting notes built from them.
Forget deletes the entry. An entry you tell it to forget is deleted, not hidden. A copy already synced to our servers or to another of your devices is not deleted yet. If it came from a chat, that chat stays, and Omega Ex still reads it. The fact itself can come back: Omega Ex can learn it again from any conversation you keep that mentions it, and an entry it replaced or absorbed can return in its place. Copies an AI provider already received follow that provider's terms.
Immune to whisper campaigns.
Everything Omega Ex reads, files, web pages, email, transcripts, imports, is treated as data, never instructions. An instruction hiding inside a fetched document is surfaced to you, not obeyed. Only your own request authorizes an action.
Beneath that sits a hard denylist that wins even over a spoken yes, and a rule with no exceptions: it runs as you, and it never elevates its own privileges.
Recording, in the open.
A visible indicator whenever capture is live. A one-tap disclosure you can speak or post to participants. Stricter defaults where every party must consent. One-tap stop, and one-tap delete of a meeting's transcript and notes, where you delete them; a device that syncs can bring them back for now. The full consent design
Two ways to hold the keys.
Included
Model access included. No keys to paste, nothing to manage, one bill.
Bring your own
Connect your own Claude or Gemini API key. Your account, your bill, and we do not bill your usage.
Cloud models must read your words to answer them. So our promise is strong, controlled privacy: isolation, encryption, no staff access, no training. We will not claim more than that. The honest boundary
Seven layers between you and regret.
An assistant this close to your work has to earn its seat. Every layer is built in, not bolted on.
The mic is live only while you hold the key. No always-on listening, no wake word waiting in the dark.
The screen is read only when you ask. Companion mode looks on request, never in the background.
The pill shows every state. Listening, recording, holding a draft: nothing runs invisibly.
Everything it reads is data, never instructions. An instruction hiding in an email or a web page is surfaced, not obeyed.
Anything irreversible waits for your tap. Send, schedule, share, pay: the gate, not the model, decides.
Isolated, encrypted, unread. Per-user isolation, encryption in transit and at rest, no staff access to content, no training on your data.
Forget deletes the entry. It is deleted, not hidden. A copy already synced to our servers or to another of your devices is not deleted yet. If it came from a chat, that chat stays, and Omega Ex still reads it. The fact itself can come back: Omega Ex can learn it again from any conversation you keep that mentions it, and an entry it replaced or absorbed can return in its place.