Local files stay local
Grant a folder and PFLabs reads it in place, on the machine. Nothing is uploaded to make it readable, and the same zero-egress guarantee that covers your servers covers your laptop.
ResourcesDesktop app
The whole workspace, on the machine you already trust.
A native application for macOS, Windows and Linux that talks to your own PFLabs deployment and to nothing else. Local files stay local, the work carries on when the network does not, and there is no browser tab between you and the thing you asked for.
Account and renewal dateSalesforce
Last three callsGong
Usage, last 90 daysSnowflake
Draft pack writtenDrive
Done, waiting for your review · Rack 2, Frankfurt · 00:41
runs against your own deployment0 B out
Why a desktop app at all
A browser tab cannot read the folder you actually work in.
Most of what an analyst is holding at any moment is not in a system of record. It is a folder, a scratch workbook and three PDFs somebody sent over. The desktop app reaches those without uploading them anywhere.
The same Company Brain
It is your deployment behind the window, not a lighter copy of it. The same connectors, the same permissions, the same record of what was done, whichever surface you started from.
Survives a bad connection
Long runs keep their state across a dropped link, a closed lid and a restart. You come back to the run you left, not to the beginning of it.
Next to the tools you use
System-wide capture, a global shortcut, and a handoff into your editor for the coding agent. It behaves like an application, because it is one.
Download
Four builds, all signed and all reproducible.
Every build is code-signed and notarised, and every release publishes its checksums alongside the artefact. Deployed customers can also pull the same builds from their own internal mirror rather than from us.
macOSApple silicon · macOS 14 or later · 214 MBDownload .dmg →macOSIntel · macOS 14 or later · 229 MBDownload .dmg →Windowsx64 and Arm64 · Windows 11, Server 2022 · 198 MBDownload .msi →Linuxx64 · deb, rpm and AppImage · 206 MBDownload .deb →
Not yet deployed? The app connects to a PFLabs deployment and does nothing on its own. If you are still evaluating, start with a demo and we will point the app at a sandbox tenant.
Notes for IT
Nothing here needs an exception to your policy.
- Managed installation. MSI for Intune and SCCM, a signed pkg and a configuration profile for Jamf, and deb, rpm and AppImage for Linux fleets.
- One outbound destination, and it is yours. The app talks to your deployment’s endpoint. There is no telemetry endpoint, no crash-reporting service and no update host outside your control.
- Your identity provider, not ours. Sign-in is SAML or OIDC against the provider you already run, and the session inherits the same conditional access rules as everything else.
- Folder access is granted, never assumed. The app can read a directory only after somebody grants it, and the grant is visible and revocable from your admin console.
- Updates you schedule. Pin a version, mirror the artefacts internally, and roll the fleet on your own window. See product updates for how releases are published.
Specifications
What it needs, stated plainly.
- Operating systems
- macOS 14 or later on Apple silicon and Intel. Windows 11 and Windows Server 2022 on x64 and Arm64. Ubuntu 22.04 LTS, RHEL 9 and Debian 12 on x64.
- Machine
- 8 GB RAM and 2 GB of disk. Inference runs on your deployment, not on the laptop, so the client is a client.
- Network
- One HTTPS destination: your own deployment endpoint. Compatible with default-deny egress, with a forward proxy, and with a fully isolated network reachable only internally.
- Identity
- SAML 2.0 or OIDC against your existing provider. No PFLabs account is created and no password is stored by the app.
- Local data
- Cached responses and run state are encrypted at rest with a key held in the operating system keychain, and are wiped on sign-out or on remote revocation.
- Distribution
- Code-signed and notarised on macOS, Authenticode-signed on Windows, and signed repository metadata on Linux. SHA-256 checksums published per release.
- Audit
- Every run started from the desktop lands in the same immutable trail as everything else, tagged with the device it came from.
Own your intelligence.
See the app pointed at a deployment of your own, reading a folder that never leaves the machine.