Your data stays yours

Cogitator runs on your computer. Your memories, conversations, and settings live in a single file on your machine, not on someone else's server. Passwords and API keys are stored in your operating system's secure keychain, not in a text file.

Security settings screenshot

Most AI tools store your data on their servers. You don't know who can access it, how long they keep it, or what happens if the company shuts down. And credentials sitting in plain text files are one bad moment away from exposure.

How it works

01

Everything runs locally

Cogitator is a single application that runs on your machine. All your data, memories, and conversation history live in one local file. Nothing gets uploaded unless you connect an external service like an AI provider.

02

Secrets go in the system keychain

API keys, passwords, and connection credentials are stored in your operating system's secure storage (macOS Keychain on desktop, encrypted keychain on Docker). Cogitator never writes credentials to a text file.

03

Commands run in a sandbox

When the agent needs to run a command on your machine, it does so in a restricted environment. Sensitive information like passwords and API keys are stripped from the environment. The agent can't access files outside its workspace.

Capabilities

Local-first storage

Your data is a file on your computer, period. Back it up however you back up everything else. Move it to another machine by copying it.

OS keychain integration

Passwords are protected by your operating system, not the app. The same security that guards your login password guards your API keys.

Command sandboxing

When the agent runs commands, it operates in a restricted environment. Sensitive variables are stripped so they can't leak into command output.

Path filtering

The agent can't read files outside its designated workspace. Your documents, downloads, and other personal files stay off limits.

Use cases

Personal privacy Keep conversations and memories on your own hardware. No cloud account required for the core experience.
Business use Meets data residency requirements because data never leaves your machine. Your IT team can verify this themselves.
Credential safety API keys for connected services are protected by the OS, not an app database. They benefit from the same encryption your system uses for everything else.
Download for macOS Beta