Built fail-safe.
When it is unsure, it asks. When it acts, you can see it. When you say forget, it forgets.
You hold the controls.
A gate on anything irreversible. Send, schedule, share, pay: each one waits for your explicit approval. The gate, not the model, decides.
Autonomy is a dial, not a switch. You set how far it can go, per capability and per skill, starting from suggest-only.
One key stops everything. A kill switch that works instantly, every time, no questions asked.
A record of every action. Everything it does is logged as it happens, so "what did it do" always has an answer.
It listens and looks when you say so. Only then.
The mic is live only while you hold the key. There is no always-on listening and no wake word waiting in the dark. Companion mode reads your screen only when you ask, never in the background. Whenever it listens, records, or looks, the pill shows it, visibly, the entire time.
Guarded like it is ours to lose.
Isolated per user. Your data is separated from every other account at the database layer, enforced by the infrastructure itself.
Encrypted. In transit and at rest, with credentials held in envelope encryption and usable only at the moment of use.
No staff access to content. Our operational logs store hashes and metadata, not your words.
No training on your data. We never train on your content, without qualification. The position for each AI provider is published on our Subprocessors page.
Redacted in transit. Personal and proprietary details are anonymized before a request leaves for any model and restored when the answer returns. Closed models never receive what they could train on.
Redaction before memory. Sensitive details are scrubbed before anything is committed to long-term memory.
Forget means forget. The only hard delete in the system is your explicit forget, and it is honored completely.
Immune to whisper campaigns.
Everything Omega Ex reads, files, web pages, email, transcripts, imports, is treated as data, never instructions. An instruction hiding inside a fetched document is surfaced to you, not obeyed. Only your own request authorizes an action.
Beneath that sits a hard denylist that wins even over a spoken yes, and a rule with no exceptions: it runs as you, and it never elevates its own privileges.
Recording, in the open.
A visible indicator whenever capture is live. A one-tap disclosure you can speak or post to participants. Stricter defaults where every party must consent. One-tap stop, and one-tap delete of a recording and its transcript. The full consent design
Three ways to hold the keys.
Included
Model access included. No keys to paste, nothing to manage, one bill.
Bring your own
Connect your own Claude, ChatGPT, or Gemini account. Your account, your bill, and we never see or bill your usage. For regulated work, a zero-data-retention configuration is part of the design.
Open-source only
One setting routes every request to vetted open-source models, so nothing you say ever reaches a closed model at all.
Cloud models must read your words to answer them. So our promise is strong, controlled privacy: isolation, encryption, no staff access, no training. We will not claim more than that. The honest boundary
Eight layers between you and regret.
An assistant this close to your work has to earn its seat. Every layer is built in, not bolted on.
The mic is live only while you hold the key. No always-on listening, no wake word waiting in the dark.
The screen is read only when you ask. Companion mode looks on request, never in the background.
The pill shows every state. Listening, recording, holding a draft: nothing runs invisibly.
Everything it reads is data, never instructions. An instruction hiding in an email or a web page is surfaced, not obeyed.
Anything irreversible waits for your tap. Send, schedule, share, pay: the gate, not the model, decides.
Redacted before it travels. Personal and proprietary details are anonymized on your Mac before a request leaves, and restored when the answer returns.
Isolated, encrypted, unread. Per-user isolation, encryption in transit and at rest, no staff access to content, no training on your data.
Forget means forget. The only hard delete in the system is the one you order.