What happens today
The patchwork
- Pasting confidential text into a cloud chatbot
- A model that logs and trains on what you send
- A vendor DPA nobody on the matter has read
- A copy on someone’s server waiting to be subpoenaed
Edge playbook
Use AI on sensitive material without sending it to a server.
The number
The read-and-draft that used to eat an afternoon lands in minutes, and never leaves the phone.
3hr → 8min
The situation
Open a privileged brief, an NDA-bound deck, or a client file inside Edge. The assistant reads it, reasons over it, and drafts what you need: entirely on-device, with no internet, no cloud copy, and nothing behind an account. Unlock it with your fingerprint or face.
What happens today
With Edge
How the work moves
Edge runs each move locally, with a preview you can read before you act. Nothing leaves the device between steps: you can turn on airplane mode and the run is identical.
Edge at work
One brief travels through the whole job. Context stays attached until the finished work lands.
Open
Edge starts from the material in front of it and asks only for what’s missing. No account, no upload, no round-trip to a server: the model is already on the phone.
Read
Edge works through the document on-device, cleaned and cross-checked against what you keep in this Space. Every reference traces back to a line you can see: nothing is fetched from outside.
Reason
The assistant thinks out loud where it counts: trade-offs named, assumptions surfaced, judgments explained. All of it stays inside this Space, walled off from every other client.
Draft
A first draft lands on the device in the shape you asked for. You keep it, copy it out by hand, or delete it: either way there was never a server copy to worry about.
Prompts worth keeping
Three prompts: a kickoff, a full run, and a packaging pass. Copy the one that matches where you are. Rewrite any detail to fit the matter in front of you.
You are Edge, running entirely on my phone with no internet and nothing sent to a server. I’m working on privileged material that cannot leave this device. Here is the file. My goal: a clean first draft I can review and finish myself, with nothing ever copied to a cloud. Walk me through the first move and tell me what you need from me.
Run the full playbook end-to-end, all on-device: open the file and tell me what you see, point me at the clauses and notes that matter, weigh the options and name the trade-offs, then hand back a draft in the shape I asked for. Keep everything in this Space. Ask before skipping any step. Show your work as you go.
Give me the output as a single memo I can read on the device: lead with the bottom line, then the reasoning and the lines you relied on. Call out anything that changed your read mid-run. Keep it local; don’t suggest sending it anywhere.
What goes in. What comes back.
Edge runs on what’s already on the phone and hands the result straight back to it. Nothing is uploaded: skip any input and the assistant asks for it the first time it needs it.
The finished artifact
Every run ends the same way: a packaged result that stays on the phone, behind your fingerprint. Here’s a preview of what shows up: locally, never in a shared channel.
Edge → your team
playbooks
On device · just now
Here’s the result. I ran the playbook end-to-end on the device, kept everything inside this Space, and packaged the draft for you to review. Nothing was uploaded, synced, or logged: it exists only here, behind your unlock.
What moved
3hr → 8min
The read-and-draft that used to eat an afternoon lands in minutes, and never leaves the phone.
draft.md · notes.md: stored on device, encrypted at rest
Before you run it
Three ways we see this go sideways and how to avoid each one.
Keep judgment with the team. The playbook should make the work clearer, not hide the assumptions behind it.
Questions
No. Edge runs a capable model entirely on-device, so the file, your prompts, and the draft never touch a server or an account. You can switch on airplane mode and the run is identical, because nothing depends on a network call.
Everything is encrypted at rest and unlocked only with your fingerprint or face. Lose the phone and the data stays opaque: there’s no cloud copy to breach and no account to compromise.
Yes, give each client its own Space. Every Space carries its own context and memory and is sealed from the others by construction, so Client A’s material never surfaces in Client B’s work.
Nothing. There’s no account, no sync, and no telemetry after first-run setup, so there’s simply nothing on a server to subpoena, leak, or breach. The only traffic Edge ever makes is opt-in model updates you trigger yourself.