Your content sits in GPU memory, prompt logs, caches, and embedding stores, where one misconfiguration can expose it all. Samsung banned ChatGPT internally in 2023 after engineers leaked source code through it.
A quieter way to work with documents
Private AI for
private work.
Muet reads your documents, answers questions about them, and edits them, entirely on your Mac.
Word
⌘⇧E100%Tue 2:14
Service_Agreement_v2.docx
Service Agreement
Service Agreement between Client and Service Provider
This Service Agreement (“Agreement”) is made effective as of the Effective Date by and between the Client and the Service Provider.
1. Compensation. The Client shall pay the Service Provider a monthly fee of EUR 8,500, payable within thirty (30) days of receipt of a properly rendered invoice.
2. Term. The initial term shall commence on the Effective Date and continue for a period of twelve (12) months, unless terminated earlier in accordance with Section 9.
3. Confidentiality. Each party shall hold in strict confidence all information disclosed by the other in the course of this Agreement.
4. Indemnification. Each party shall indemnify the other against losses arising from its breach of this Agreement, excluding indirect and consequential damages.
5. Governing Law. This Agreement shall be governed by and construed in accordance with the laws of the State of Delaware, without regard to its conflict-of-laws principles.
mMuet
⌘⇧EActive document
Service_Agreement_v3.docx
You asked
“Is the confidentiality clause strong enough?”
Answer
0 bytes transmitted
localhost30-day money-back · Get release updates
THE PROBLEM
Every AI tool processes your documents on someone else’s servers.
ChatGPT, Claude, Copilot, and Gemini all move your content off your machine into prompt logs, caches, and GPU memory, where abuse-review staff can read it, breaches expose it, rewritten terms retain it, and subpoenas reach it. That is the architecture, not a policy choice.
Consumer tiers train on your prompts unless you opt out. ChatGPT Free and Plus and consumer Microsoft Copilot do so by default, Gemini Apps Activity is on by default, and GitHub Copilot Free, Pro, and Pro+ join them from April 2026. Enterprise tiers differ, but most users aren’t on them.
Abuse review, safety teams, security investigations, and support escalations all mean vendor staff reading customer content, with no visibility for you.
Subpoenas, government orders, and discovery compel vendors to produce data whatever the contract says. In May 2025 a US federal court ordered OpenAI to preserve “deleted” ChatGPT conversations for Plus, Free, Team, and most API users (NYT v. OpenAI).
The US CLOUD Act and FISA 702 let US authorities compel US-based AI vendors to hand over customer data, often under a gag order, even for EU and UK customers. The 2020 Schrems II ruling turned on exactly this, and no DPA overrides it.
Vendors can also cut you off. Anthropic’s September 2025 policy restricted Claude for entities more than 50% owned from unsupported regions, and by April 2026 Goldman Sachs had cut off its Hong Kong bankers entirely, for reasons unrelated to their work.
A contract is a promise the vendor won’t look.
Muet is built so they can’t.
Use it on its own or beside the tools you already pay for.
Muet handles what Claude, ChatGPT, and Copilot can’t: the privileged settlement, the patient record, the target company’s cap table. Use the cloud for the public eighty per cent and Muet for the private twenty.
- Claude
- ChatGPT
- Copilot
- Gemini
- Notion AI
- Grammarly
- Perplexity
- Cursor
- Harvey
- CoCounsel
Redacting by hand ends in the fatigue trap.
Most professionals end up pasting documents into ChatGPT or Claude paragraph by paragraph, stripping names by hand and hoping nothing slips through.
Then fatigue wins: the tenth redaction is sloppier than the first, and by the twentieth most people paste in the whole document, telling themselves it will be fine this once.
Everyone crosses this line eventually, because the workaround is exhausting and the productivity gain is too large to resist.
Most AI sold as private is private only by contract.
Your data still leaves the machine, and you rely on a chain of promises that no training run, sub-processor leak, subpoena, or acquisition breaks. Real privacy is architectural: the data never leaves.
Muet (on-device)Architectural
Runs on your Mac and never transmits your documents.
On-premise self-hostedOperational
Stays on your own infrastructure, which your IT team must secure.
Enterprise contract (Claude, OpenAI)Contractual
Data reaches the vendor, which contracts not to train on it, and stays discoverable.
Paid chatbot (ChatGPT Plus, Claude Pro)Default
Sent to the vendor and kept for 30 days by default, with varying training opt-outs.
Free chatbot / third-party wrappersNone
Sent to both the vendor and the wrapper, and may be used for training.
BUILT FOR THIS
Built for sensitive document work, not general-purpose chat.
Service_Agreement.docx
§ 1 Compensation
The Client shall pay the Service Provider a monthly fee of EUR 8,500EUR 12,000, payable monthly.
Redline in place.
Settlement.pdf
Whereas
This settlement, effective 15 May 2026, resolves all claims between the parties. Total consideration of €1.25M will be paid within thirty (30) days.
Key terms, extracted.
IMG_4210.jpg
Receipt
Read from photo.
Q3_Revenue.xlsx
Region
Q2
Q3
EMEA
3.2M
4.1M
APAC
1.8M
2.4M
Americas
1.7M
2.2M
Q3 total · EUR 8.7M
Ask the numbers.
Witness_Statement.docx
Statement
Alice Hernandez[REDACTED] confirms she was present at the meeting.
Contact: ahernandez@acme.co[EMAIL]
Redact, ready to share.
Legal review
Contracts, clauses, and key terms, reviewed on-device, so ABA 512 disclosure isn’t triggered the same way.
Financial analysis
Deal memos, cap tables, models, and audits, with the numbers kept on your machine.
Medical records
Patient files, clinical notes, and diagnoses. Sending them off the device can be a reportable HIPAA breach; Muet never does.
Images, scans, evidence
Whiteboards, receipts, and screenshots, read by on-device OCR so you can query and extract them.
Tracked-change editing
Ask for edits in plain language and Muet writes them into the DOCX as tracked changes to accept or reject in Word.
Anonymisation
Remove names, addresses, emails, and IDs in one pass and get a clean anonymised copy with no tracked changes, comments, or metadata.
Spreadsheet Q&A
Ask Excel and CSV files questions in plain language. They are parsed natively, never uploaded.
Secure translation
Translate contracts, filings, and case files on your Mac, formatting intact, without sending them to Google Translate or DeepL.
And many more
Summaries, drafting, meeting notes, filings, depositions, regulatory submissions, tax documents, and audit responses, with more arriving in updates. If it’s on your Mac, Muet works with it.
HOW IT WORKS
Your document never leaves your Mac.
Step 01
Open any document
PDF, Word, Excel, PowerPoint, or an image, in whichever app you use.
Step 02
⌘⇧E
Press ⌘⇧E
Muet finds the active document and parses it on your machine before your finger leaves the keyboard.
Step 03
Summarise
Proofread
Anonymise
Translate
Compare
Ask anything, or pick an action
Choose Summarise, Proofread, Anonymise, Translate, or Compare, or type a question. Answers are cited, edits arrive as tracked changes, and anonymising takes one pass.
You shouldn’t have to wonder which model is best.
There is no model picker, context-length dial, or temperature slider.
Muet tests the local models, picks the best for your Mac, and asks once before switching to a stronger one.
The better your Mac, the better Muet gets, automatically.
Muet reads your Mac’s unified memory and picks the largest model it can run comfortably.
MacBook Air · 16 GB
Small
MacBook Pro · 24–32 GB
Balanced
MacBook Pro · 48 GB+
Max
Muet keeps working on a plane, in a secure facility, or on a train with no signal.
Cloud AI stops when the connection drops, and flights, tunnels, bad Wi-Fi, and regulated facilities cost hours each week.
Because Muet runs on your Mac, you can finish a review in the air, edit a contract off-network, or summarise a deposition on the train.
With no sub-processors and no DPA, there is nothing to negotiate.
Most AI compliance work exists only because data moves. Keep the data still and most of that work disappears.
No third-party processor
Muet isn’t a processor of your documents, so GDPR Art. 28 doesn’t apply in the EU or UK: no DPA to negotiate, no sub-processor list, no Art. 28(3) terms.
No transfer means no Schrems II problem
Documents don’t leave the device, so the transfer rules in GDPR Art. 44–49, Switzerland’s revFADP, and the UK IDTA don’t engage.
Confidentiality duties stay intact
ABA Formal Op. 512 and Florida Bar Op. 24-1 (US), CNB September 2024 guidance on secret professionnel (France), §203 StGB (Germany), and the SRA Code (UK) all turn on whether a third party processed client information. With Muet, none did.
Sectoral rules: HIPAA, FINRA, ITAR, GLBA
Each is triggered when a third party creates, receives, maintains, or transmits regulated data. Muet receives nothing.
What does cross the network
Licence checks at activation and periodically after, update checks, and the one-time model download. No document content, prompts, or usage data, and no telemetry, analytics, or crash reporting.
No audit surface for your work
Our servers hold nothing to breach, subpoena, or inspect. The audit trail is the laptop, the device policy, and the invoice.
Confidentiality shouldn’t need
an enterprise contract.
Enterprise contracts that limit one vendor’s access cost tens of thousands a year, plus audits, and still send the data. Muet costs $390 per Mac per year.
PRICING
One licence covers one Mac for a year.
Founding member · 10% off
Annual licence
$351$390per device, per year
One annual invoice keeps it easy to expense. If Muet isn’t right for your practice, email us within 30 days for a full refund.
30-day money-back guarantee · Limited founding spots
Every licence includes
- Unlimited document Q&A
- Tracked-change editing in Word format
- One-pass PII anonymisation
- Best available model for your Mac, updated automatically
- Your documents never leave your machine
- Works offline for up to 14 days between licence checks
System requirements
- Mac
- Apple Silicon (M1, M2, M3, M4 or newer). Intel Macs aren’t supported.
- macOS
- Sequoia 15 or newer.
- Memory
- 16 GB minimum. The Balanced model needs 24 GB or more; Max needs 48 GB or more.
- Disk
- ~12 GB free for the on-device model.
- Network
- Needed to activate, download the model once, and check your licence periodically. Between checks Muet works offline for up to 14 days.
If you’re unsure whether your Mac qualifies, email us and we’ll tell you in five minutes, and refund any purchase that won’t run.
Annual cost for a 5-person team.
Enterprise AI tools come with contracts, seat minimums, and procurement cycles. Muet is licensed one Mac at a time.
You pay
Muet5 devices
$0/yr$390 / device / year. Runs on-device, so documents never leave.
Claude Team (Standard)5 seats (min)
$0/yr$20 / seat / month, billed annually, with per-session and weekly usage caps. Cloud only.
Spellbook5 seats
$0/yr$89 / seat / month, Associate tier.
Thomson Reuters CoCounsel5 seats
est. $0/yr$225+ / seat / month.
HarveyEnterprise only
est. $0/yr~$1M+ typical AmLaw annual contract.
Enterprise prices are estimates from public reporting; Spellbook, Claude Team, and Muet prices are published.
Muet installs itself, and we help your organisation adopt it.
Most people download Muet and start working. Some teams also need a paper trail for their CISO, a fleet rollout, or a written answer to “why is this safe?”
Tier 01
Personal setup
Solo, not especially technical
In a 30-minute remote session we install Muet, walk you through Accessibility permissions, and pick the right model for your Mac, so you finish ready for your first five questions.
Book a personal setup →Tier 02
Team rollout
Law firm, financial advisory, clinic, 3 to 50 Macs
Bulk licensing, a one-page security brief for your compliance committee, live Q&A with IT and partners, shared model defaults, and a deployment checklist, delivered remotely or on site.
Plan a team rollout →Tier 03
Enterprise & on-premise
Regulated industry, managed fleets, or sensitive sites
A signed .pkg for Jamf, Kandji, and Mosyle, a device-policy configuration profile, air-gapped installs for SCIFs and clinical networks, a CISO architecture review, and on-site deployment when needed.
Discuss enterprise deployment →Not sure which you need?
Tell us about your setupTRUSTED BY
Professionals who can’t afford to guess whether it’s private.
- Solo attorneys on privileged work: family, criminal, estate, disputes
- M&A teams reading target data rooms
- Founders drafting pre-patent claims and formulation notes
- Researchers on pre-publication findings and unblinded trial data
- Biotech and pharma on CMC, INDs, and regulatory submissions
- In-house counsel on investigations, whistleblower complaints, NDAs
- Investment banks and buy-side analysts on deal memos
- Family offices and private bankers on UHNW positions
- Journalists and NGOs protecting sources under hostile jurisdictions
- Compliance officers under GDPR, HIPAA, FINRA, ITAR
- HR teams investigating misconduct without naming complainants
- EU employers on employee data under Schrems II
- Executives drafting earnings, layoff, and reorganisation memos before release
Keep confidential work on your Mac.
$390 per Mac per year, with a 30-day money-back guarantee. Requires Apple Silicon and macOS 15 or newer.
If you’re not buying today, stay informed.
Leave your email for new releases, model upgrades, and occasional notes on private-AI workflows. Unsubscribe in one click.