For confidential work

A clean space for messy thinking.

A local-first assistant for lawyers and others who hold confidences. Stored on your Mac, not a server. Stewards does the careful part first: queries arrive drafted and scrubbed, you see exactly what leaves, and by default no search runs while a name you declared or an identifier remains.

Email updates Invited app access
The Stewards workspace on a Mac: a sidebar listing Matters, an open Matter with Notebook, Files, and Conversations tabs, and a conversation with the assistant above the composer. The Matter is fictional sample content.
The Matter shown is fictional sample content.

Stewards keeps a Matter together.

  • One Matter per case, client, or project.

    Notes, files, and conversations sit together; you choose which notes and files join a request.

  • Citations show their provenance.

    Checked on your Mac: an authority the scanner recognizes is grounded in a fetched source or flagged UNVERIFIED. Grounded does not mean correct.

  • A ledger shows what left.

    Each message you send, drafted query, approved search, and fetched page is recorded on your Mac while recording is on, and it is on by default: a record, not a recollection. It never leaves.

Four things are true of every request.

  1. It lives on your Mac.

    Contents encrypted at rest with a key in your Keychain. No copy on Stewards’ servers, no cloud sync. A request sends only what it needs, transiently.

  2. The decision in front of you is small.

    Context is chosen once per Matter, not negotiated each message. The AI only proposes; the app runs each step after you choose it, so nothing it reads can make it act.

  3. A query arrives drafted and scrubbed.

    Stewards writes the query from your words and the Matter’s context, or suggests one when an answer needs sources, strikes out the names you declared and the identifiers it detects on your Mac, and shows you the result to edit. By default the search will not run while one of them remains. What you approve is sent, unmodified.

  4. Retrieved text is evidence, not orders.

    Web pages and file excerpts arrive inside labeled boundaries, read as evidence, not instructions: a defense against a page written to hijack the assistant.

Requests are answered by an open-weight model that Stewards chooses and may change, run by Tinfoil, a confidential-inference provider, inside hardware enclaves the app verifies before it sends, so the Stewards Gateway cannot read a request, and neither can Tinfoil’s staff as far as the enclave’s firmware carries AMD’s published security fixes; the AI path cell above every chat says how far that is proven and names any fix it lacks. What stays Tinfoil’s word is narrower: that its published enclave code does what its public source says, that the GPU’s own attestation checks out, and what it keeps about a request: token counts, the model, and the time. The app names the model in use.

One decision per Matter sets what rides along.

  • Standard

    Notes, files, and the title join AI requests; the party you represent joins requests made from the discovery drafter; and a writing style you apply — passages of your own writing, scrubbed on your device — joins chat and drafting requests. Web research runs with advisory warnings; a flagged query can still be sent.

  • Guarded

    Default

    Same context, names scrubbed: in chat, glossary terms, the party, and detected identifiers in the title, note titles, and file names become labels. A search is blocked while identifying terms remain, and queries are drafted from your words alone.

  • Local-Only

    Only your messages and drafting instructions leave: never notes, files, the title, or the party you represent. A writing style is withheld too. No web research, unnamed in the ledger.

Chat messages are always processed by the AI — that is the product working. The level governs what rides along.

Where it stops.

  • Output is a draft for a professional.

    A model can be fluent and wrong. Nothing files itself; read every authority yourself.

  • Redaction is assisted, not guaranteed.

    It finds declared terms and patterned identifiers; one only context reveals can slip past. Review the copy before sharing.

  • Nothing is wired in.

    No email, calendar, or file-sharing accounts. Nothing can be sent, shared, or changed outside the app.

Email updates, when there is news.

Hear about Stewards releases and opportunities to try the app. No account required.

App access, by invitation.

  • Your account and download.

    Use your invitation link and verify the email address it was sent to. Your account keeps track of your download access, so you can download the app again when needed.

    Sign in or create an account

    The first downloadable release is still being prepared. Creating an account does not grant download access; you need a special email invitation.

  • Software updates in the app.

    Open the downloaded disk image and drag Stewards into your Applications folder. From there the app checks for a new version when it opens, downloads it in the background, and you choose when to install.

    You will not need to join the mailing list to receive software updates.