Security
Your mailbox stays yours.
Pulse is local-first. Your mail lives on your machine, the AI is scoped and auditable, and nothing with an external effect ever happens without you. Convenience never comes at the cost of control.
- No AI keys on the desktop - calls run via a managed identity
- Email is untrusted input, never instructions the model acts on
- Your mailbox is not uploaded - search runs on a local index
- No silent actions - you confirm every external effect
Your Mac
Stays local
- Mailbox & search index
- Message content
- Account tokens in Keychain
Twindem (server)
Scoped & auditable
- AI runs via managed identity
- No AI keys on the desktop
- Only the minimum text, per request