Yes. Because every prompt and document stays on your device, no third-party processor ever sees client communications. There's no cloud sub-processor agreement to negotiate and no data-residency question to answer.
Local inference satisfies the duty of reasonable confidentiality more directly than any hosted service. Privileged ships with an audit log you can produce to your bar if questioned.
Yes. The work-product doctrine protects materials an attorney prepares in anticipation of litigation — analyses, summaries, notes, strategy — from compelled disclosure to opposing parties. Because Privileged runs entirely on your device, using it to analyze documents or review filings doesn't disclose that material to any third party, so work-product protection stays intact.
Your documents stay on your computer, in the same place they already are. Privileged processes them locally and keeps any analysis or chat history on your device only — we have no copy and no access to any of it.
No prompt or document data, ever. Anonymous crash reports are opt-in and stripped of any user content.
Apple Silicon (M1 or later) with 16GB of unified memory. 32GB is comfortable for large discovery sets.
The model runs on Apple Silicon via Metal, offloading work to the GPU rather than the CPU. Most analysis sessions use a fraction of available compute — your other applications keep running normally. Battery draw during active use is moderate, roughly comparable to a video call.
Not yet. A Windows build for Snapdragon X and CUDA machines is in private beta — join the waitlist on the home page.
Reach out to us directly and we'll work something out. We want every attorney using Privileged to feel confident in the purchase.
Privileged is intentionally built for solos. If you've grown past one practitioner, talk to us — we have a small-firm tier in private beta.