Home / Features / Privacy and local-first
Local-first, private, and offline-capable AI with osFoundry
Run models on-device, keep private channels off the cloud, and work offline. Your data, your machine.
osFoundry is local-first: a desktop app that runs models on-device, keeps private channels from ever syncing, and works fully offline. End-to-end encryption protects what does sync. The local sync engine projects your workspace into your file system, scoring and indexing happen device-side via osIndex, and a no-leak local-LLM mode guarantees no prompt ever leaves the machine.
Quick answer
- Local-first desktop app — works offline, syncs when online.
- Private channels never leave your device, period.
- End-to-end encryption for everything that does sync.
- No-leak local LLM mode — provider-neutral, never any cloud routing.
- Local sync engine — workspace as a folder on your disk.
Key capabilities
- Local-first sync architecture — bidirectional, conflict-aware.
- Private workspace mode — flagged data never leaves the device.
- Offline-capable apps — Room Apps work without network.
- Device-side osIndex scoring — model scoring runs on your hardware.
- No-leak LLM mode — workspace setting that disables all cloud routes.
- End-to-end encryption with workspace-controlled keys.
Frequently asked questions
Does osFoundry require a cloud account to use?
No. The desktop app runs locally with no sign-in required. Cloud features (sync, hosted GPU, public app URLs) are opt-in.
Can I work entirely offline?
Yes — install local models, disable cloud routes, and the app works without network access. Sync resumes when you reconnect.
How is "private channel" different from a normal channel?
A private channel is flagged at creation. The local sync engine never enqueues its messages or attachments for upload. Even other devices on your account can’t see it.
Related features