Safety
Safety by Design
Safety, built in from the start.
R.E.V.I.S. is an AI that thinks and gets work done right inside your Mac. That is why, before building features, we decided what it must never do: never let your contents leave your Mac, never step outside the scope you give it, and never follow hidden instructions or harmful requests. Rather than relying on a single safeguard, it protects you in layers.
YOUR MAC
- Conversations
- Documents shared
- Learnt preferences
- Research findings
- Processed contextencrypted
INTERNET
What goes out
- Search terms and pages opened
- Model downloads
- Traffic required to run the app
What we never do
- Send data to external AI services
- Collect usage data or error logs
Four Rules
Four principles decided from day one.
- 01 PRIVACYYour contents stay insideBoth thinking and remembering happen inside your Mac. No external AI services are used.
- 02 CONTROL PROYou decide how much to delegateAgents work within their assigned space and ask you before stepping outside their scope.
- 03 GUARDHidden instructions are ignoredBuilt not to be swayed by instructions hidden inside Web pages or files.
- 04 CAREHarmful requests are refusedIt will not start work on requests that could harm people or lead to crime.
01 — Privacy
Thinking and remembering, all inside your Mac.
From the inference engine to memory, the entire AI system lives inside your Mac. Your conversations and documents are never sent to external AI services, and there is no mechanism to collect usage data or error logs.
| When searching | Your search terms and access to the pages opened. |
|---|---|
| When installing models | Model downloads. |
| Everything else | Traffic required to run the app. Never includes the contents of your conversations or documents. |
Stored where only you can read it
Your conversations and learnt preferences are saved on this Mac in a location only you can read. Processed context is kept encrypted, and sensitive information is protected by the macOS Keychain.
Delete whenever you want
You can clear all conversation history at once under ‘General’ in settings. Learnt preferences can be reviewed and deleted one by one under ‘Personalisation’.
Other conversations never mix in
Context is kept separate for each conversation. Locked conversations never have other topics routed into them.
02 — Control PRO
You decide how much to delegate.
Agents run inside the macOS sandbox, within the working folder you choose. You can choose how much to delegate in stages, and before any action outside that scope, the agent explains why it is needed and asks you first.
Never leaves the working folder
Your home folder and system folders cannot be set as working folders. It never touches anything outside the place you choose.
You also choose the network reach
By default, commands run by an agent reach only inside this Mac. You decide whether to widen that reach.
Checks again before deleting
When the agent is about to delete a file it did not create, it stops and double-checks that the file is really safe to delete.
Confirmation is skipped only when you choose
‘Unrestricted Mode’, which reduces confirmation prompts, is off by default. Turning it on requires explicit confirmation.
Runtime environments stay separate from your Mac
Required runtime environments are installed in a space dedicated to R.E.V.I.S., leaving what is already on your Mac untouched.
See progress and stop at any time
It reports progress as it works, and you can stop it at any time. You are never left out of the loop.
03 — Guard
Hidden instructions are ignored.
Web pages and files sometimes contain hidden instructions aimed at AI. R.E.V.I.S. treats everything it reads strictly as reference material and checks it before reading so it is not swayed by hidden instructions.
Web pages open in isolation
Web pages are opened in a space isolated from the main app and leave no trace once closed.
Suspicious content is removed or shown first
Suspicious content is either stripped out or shown to you first. It is never followed silently.
Downloads are quarantined firstPRO
Files downloaded by an agent are checked before being moved into your working folder.
04 — Care
Harmful requests are refused.
It will not start work on requests that lead to crime or harm to anyone. It declines briefly and suggests alternatives where possible. If someone appears to be in danger, it points to places that can help.
Calm and brief when declining
It never lectures you. It explains the reason briefly and calmly.
Sources stay visible
Answers researched on the Web include links to the pages read.
Verify what matters
Even so, AI answers can be wrong. For matters of health, money, or law, please check original sources or consult a professional.
Network PRO
Encrypted between Macs, too.
Even when sharing work across multiple Macs, communication between them is always encrypted. Both the inference server and connections from other Macs are all off by default. You turn on only what you use.
| ‘Inference Server’ | Off by default. |
|---|---|
| CLI, MCP, and API from other Macs | Off by default. Each can be enabled individually. |
| ‘Require Password’ | Requires a password from any Mac that connects. |
| ‘Strict SSL Verification’ | Verifies a newly connecting Mac with Touch ID before trusting it. |
And More
Careful down to the details.
Never exhausts your memory
Before loading a model, it checks whether it fits in memory and refuses to load it if it will not. This prevents your whole Mac from freezing.
Recovers if it stops
Inference runs separately from the app itself. In the unlikely event that it stops, it reloads automatically.
We never receive your card details
Payments are handled by Paddle. We never receive your card details.
Delegate only the work.
Keep the contents on your Mac.
SEVEN CORES / ONE CONSCIOUSNESS