For IT
No backend, no accounts, no firewall exceptions
It is a desktop app with nothing behind it. There are no accounts to manage and no service to keep running. The first release will be one installer and one license file, deployed with the tools you already use.
Platforms
One app for every device your people use, and one person is licensed on all of theirs. Windows and Mac ship first, phones and tablets next.
| Platform | Versions | Processors | Ships with | Verified so far |
|---|---|---|---|---|
| Windows | 10 and 11, 64-bit | Intel or AMD (x64), Arm | Version 1.0 | Self-test passes and the release build compiles on build machines: Windows Server 2025 on x64, Windows 11 on Arm. Not yet run by hand on a PC. |
| macOS | 12 Monterey and later | Apple silicon. Intel on request | Version 1.0 | Self-test passes; release build verified. |
| iPhone and iPad | iOS and iPadOS 15 and later | All supported devices | Version 1.1 | Builds. Not run on a device. |
| Android | 7.0 and later | arm64, arm 32-bit, x86-64 | Version 1.1 | Release build verified; not tested hands-on. |
| Linux | Ubuntu 20.04 LTS and later, Debian 10 and later | x64, arm64 | On request | Self-test passes on Ubuntu 24.04. |
What it needs from your network
Nothing. The app needs no internet access, no open ports, no proxy configuration, no allow-listed domains and no certificates. It runs on a machine that is disconnected.
To run
A standard user account. No administrator rights.
File access
Only files the user chooses in a dialog or drops on the window, and the place they choose when saving.
Other access
None. No contacts, location, microphone or camera roll. On macOS it runs in the App Sandbox.
Disk
About 70 MB for the macOS app. No fixed memory minimum.
Deployment
Version 1.0 will ship as a kit that your IT team holds and deploys. Nothing in the kit is available to install yet.
| Target | In the kit | How you deploy it |
|---|---|---|
| Windows | A signed installer with silent switches, and an .msix, for x64 and arm64 | Intune, a remote management tool, Group Policy, or by hand |
| macOS | A signed, notarized .pkg | Jamf, Intune, Kandji, or by hand |
| iPhone, iPad, Android | Delivered privately to your organization with Version 1.1 | Apple Business Manager and managed Google Play, which you must have |
| Every kit | Your license file, a signed checksum manifest, a software bill of materials, release notes and a deployment guide | The guide shows how to verify the app makes no connections |
Licensing without a server
- One small signed license file for your organization, holding the licensee, head count, dates and an ID.
- You place it in a machine-wide location during deployment, so every user on that computer is covered. A user can also import one by hand.
- The app verifies the signature and the dates on the device each time it starts. Nothing is activated online.
- The license is per person, not per device. Each person can use the app on every device they have, and there is no per-device limit.
- The app does not count installs, report usage or contact anyone.
- The license check arrives with Version 1.0.
Updates
The app cannot update itself, because it cannot go online. An update is a new kit that you install like the first, when you choose. Security fixes will ship as out-of-band kits.
To confirm the app makes no network connections on your own machines, follow the steps on the security page.
Files it handles
| Input | PDF. Images arrive with later releases. |
|---|---|
| Password-protected PDFs | Skipped in the current build. A password prompt arrives with Version 1.0. |
| Digitally signed PDFs | Can be merged. Tools that change pages will warn first, because any change invalidates the signature. |
| Office documents | Not supported. Export to PDF first. |
| Maximum file size | Bounded by the computer's memory in the current build. Measured limits will be published with Version 1.0. |
| Interface language | English. |
Try it free on your own machines
Free trials are open to businesses. No account to create, and your documents never leave your devices while you try it.