Join early access
Klara One / Trust

What's yours stays yours.

What stays on your Mac, what leaves it, who can do what, and what checks it. In plain words, for you and for whoever runs your IT.

Where your data lives.

On your Mac
  • Memory and what the team knows
  • Documents and the company book
  • Secrets, in the vault
  • Logs and the audit trail
  • Schedules and workflows
  • The memory search index (local model)
only the text
a task needs
To the AI model
  • Claude, on your own Claude account
  • Other models on Klara One credits (soon)
  • Telegram messages pass through Telegram
  • iPhone notifications: Apple carries ciphertext only

Not everything is AI.

Klara decides what to do. Doing it is often plain code on your Mac: no model, no tokens, no guessing.

YouAsk“Send the VAT package to the accountant.”
AIKlara plansPicks the workflow and the steps.
GateYou approveSending outside waits for your yes.
Server · no AIThe server does itBuilds the folder, numbers the files, sends the mail.
LogWritten downEvery step and tool call in the audit log.

Gates you set.

Every tool can sit behind a gate. The server enforces it, not the interface, and no specialist can loosen its own gate.

stepAsk every timeEach call waits for your yes. For anything that changes the outside world.
taskAsk once per assignmentThe first call asks; your yes covers the rest of that assignment. Good for servers and file shares.
globalFollow the house ruleThe tool follows the system-wide setting. Firewalls, DNS and containers stay gated regardless.

Checked, and still to check.

✓
VaultAES-256-GCM. The master key is held in the macOS Keychain, never written to a file.
✓
Multi-factor (MFA)Signing in to the dashboard and revealing a secret both ask for an authenticator code, even on your own Mac.
✓
PasskeysAdd a passkey and Touch ID replaces the code for the vault. The code stays as the fallback.
✓
Secrets never on the command linePassed through environment and credential helpers, masked everywhere they're shown.
✓
Web pages are data, not ordersText from websites, mails and documents is marked untrusted and never runs as an instruction.
✓
Connectors pinned and localInstalled once, to a fixed version. Starting one never downloads anything.
✓
Audit logEvery tool call, with who asked and what happened.
✓
GDPRPersonal data stays on your Mac. Data processing terms on request.
…
Users and rolesComing with Business: who can see and start what.
…
Security review with Claude MythosAn independent penetration test, checked with Claude Mythos before launch. Results published here.