Security

It lives on your computer.It does not have your computer.

Other on-device AIs can reach your files and the rest of your machine. This one cannot.

On your computer

They only reach what you put in TOPOS.

When you let someone in, they do not get your photos, your other folders, or the rest of your computer. They get the place you built — and only what you added to it.

OTHER ON-DEVICE AIsyour computerCodexClaudeCursorOpenClawHermesphotosmailnotesworkidsTOPOSout tothe internetReach: every folder, then out.TOPOS · UP CLOSEyour computerCodexClaudeCursorOpenClawHermesphotosmailnotesworkidschatsTOPOSruns on its ownbrowsingmessageswork logyour sourcesintelligencerefineryhigh densityINGESTwhat you addREQUESTan ask inone answer outReach: only what is inside the line.
TOPOS is one part of your computer, with its own line around it. What you add comes in; an ask comes in; one answer goes out. The rest of your computer stays yours.Product names belong to their owners.

Cognitive Firewall

A gate that decides what actually leaves.

Every request — a person, an app, or an AI — has to pass this gate before anything goes out. You set the rules. The asker does not.

01PERMISSIONsession · ceilingkey, or nothing02NEGOTIATIONnarrow, or denybefore any data03TIERclamped by grantdefault_disclosure04RETRIEVALdense artifactsnever selected05FILTERSmanifest · PIINSFW dropped06MINIMIZERprovable subsetbackstop last6 LANES54321 LANEA GRANTEE ASKS“how are they doing?”through their own AIWHAT LEAVES“they're fine, busy week”one sentence, one recordDENIED · only 01 or 02 can do this · p95 ≈ 0.8 ms
  1. Access

    If you have not given them access, they get nothing.

  2. Scope

    If they ask for too much, they have to ask smaller — or they get nothing.

  3. Filter

    They see a protected copy, not everything.

  4. Last check

    A final pass that can only take things out.

If it is not sure, it shares nothing.

TOPOS decides what leaves. You decide the rules.

Who

You choose who can ask.

Give access to a person, an app, or an AI. Same rules for all of them. Without your say-so, nothing gets through.

  • People and AIs.You decide who is allowed to ask.
  • One click to take it back.Access is gone before the next read.

What they see

Access gets them to the door. You decide what they see.

Who can ask is not the same as what they get. Once someone is in, you still choose how much they can see.

You see the full record. People you share with see a protected copy — private details are already taken out before anyone asks.

incoming recordprivacylayerYou see everythingdinner w/ Maya, 7pm —call 555-0142 re: leaseThey see a filterdinner w/ [person], 7pm —call [phone] re: lease

If a record is not ready yet, it cannot be shared.

How much you add

You do not need to give it everything.

TOPOS does its best work with a little, not a dump. A few everyday sources are enough.

The things you already do — browsing, messages, a work log — keep it current without a new habit, and without typing anything in by hand.

See how data works →

Still moving

We keep making this tighter.

The tools that protect what leaves are not finished work. We keep upgrading them, and we test them before every release.

You can watch every read and every write. Nothing touches your data silently.

Table of connected apps with read and write counts
Reads and writes — live, for each connection.

Get yours

Choose what goes in. Decide who can see it.

You can take it back. On a computer you own.

enter TOPOS