Accueil / Fonctionnalités / Confidentialité et local-first

IA local-first, privée et capable hors ligne avec osFoundry

Exécutez les modèles sur l’appareil, gardez les canaux privés hors du cloud et travaillez hors ligne. Vos données, votre machine.

osFoundry est local-first : une app de bureau qui exécute des modèles sur l’appareil, garde les canaux privés de toute synchronisation et fonctionne entièrement hors ligne. Le chiffrement de bout en bout protège ce qui se synchronise. Le moteur de synchronisation local projette votre espace de travail dans votre système de fichiers, le scoring et l’indexation se font côté appareil via osIndex, et un mode LLM local sans fuite garantit qu’aucun prompt ne quitte jamais la machine.

Réponse rapide

App de bureau local-first — fonctionne hors ligne, se synchronise quand en ligne.
Les canaux privés ne quittent jamais votre appareil, point.
Chiffrement de bout en bout pour tout ce qui se synchronise.
Mode LLM local sans fuite — neutre vis-à-vis du fournisseur, jamais de routage cloud.
Moteur de synchronisation local — espace de travail en tant que dossier sur votre disque.

Présentation

Most AI products are cloud services with a desktop shell: your prompts, files, and history live on someone else’s servers, and “privacy” means a policy promise. osFoundry inverts that. The desktop app is the primary home of your workspace — the local sync engine projects it into your file system as ordinary folders and files, models can run entirely on-device, and cloud features are opt-in additions rather than the foundation.

Privacy is enforced at the architecture level, not the policy level. A private channel is excluded from the sync queue at creation — its messages and attachments are never uploaded, so there is nothing on a server to leak, subpoena, or misconfigure. The no-leak local-LLM mode applies the same idea to inference: it is a workspace-level switch that disables every cloud route, so no prompt can leave the machine regardless of which chat or agent sends it.

Everything that does sync — because you chose multi-device or team features — travels end-to-end encrypted with workspace-controlled keys. The result is a gradient you control: fully offline and local, selectively synced, or cloud-augmented, per workspace and per channel.

Fonctionnalités clés

Architecture de synchronisation local-first — bidirectionnelle, consciente des conflits.
Mode espace de travail privé — les données marquées ne quittent jamais l’appareil.
Apps capables hors ligne — les Room Apps fonctionnent sans réseau.
Scoring osIndex côté appareil — le scoring des modèles s’exécute sur votre matériel.
Mode LLM sans fuite — paramètre d’espace de travail qui désactive toutes les routes cloud.
Chiffrement de bout en bout avec clés contrôlées par l’espace de travail.

Comment faire dans osFoundry

Flag what is private — Create a private channel for sensitive work. It is excluded from sync at creation — messages and attachments are never enqueued for upload, and other devices on your account cannot see it.
Go local for inference — Install a local model from the catalog, then enable no-leak LLM mode in workspace settings to disable all cloud routes for prompts.
Verify it yourself — Disconnect from the network and keep working — chat with local models, edit notes, run offline-capable Room Apps. Sync resumes for non-private data when you reconnect.

Cas d’usage

Legal and back-office teams: Draft against contracts and HR documents with a local model in a private channel — nothing ever leaves the machines that hold the files.
Consultants under NDA: One private channel per client. Client material stays on-device while general research uses cloud models in normal channels.
Frequent travelers: Full workspace on a laptop: local models, notes, and apps work in flight; encrypted sync catches up on landing.

Questions fréquentes

Does osFoundry require a cloud account to use?

No. The desktop app runs locally with no sign-in required. Cloud features (sync, hosted GPU, public app URLs) are opt-in.

Can I work entirely offline?

Yes — install local models, disable cloud routes, and the app works without network access. Sync resumes when you reconnect.

How is "private channel" different from a normal channel?

A private channel is flagged at creation. The local sync engine never enqueues its messages or attachments for upload. Even other devices on your account can’t see it.

Which data leaves my machine in the default setup?

Only what you opt into. Private channels never sync. Non-private data syncs end-to-end encrypted when you enable multi-device or team features; local-model prompts never leave the device, and no-leak mode extends that guarantee to the whole workspace.

Can I mix cloud models with local privacy?

Yes — route sensitive prompts to local models (or keep them in private channels) while public-information prompts use cloud models. The routing is configurable per path in osStudio.