Security & compliance

Before signing, your CISO will read this page.

Here is exactly how your data flows, what leaves your Mac, what stays, and who can see it. No marketing.

Email security@hexagone.ai

Four principles, zero vague promise

Here is what Hexagone AI guarantees technically.

01

Everything on your machine

Detection, anonymization, mapping: everything runs locally on your Mac or PC. No original file is ever sent to a Hexagone AI server.

02

Consistent masking

A given name is always replaced by the same marker over time. You keep consistency without breaking confidentiality.

03

No third party

Anonymization runs without calling any third-party service. You can take your machine offline and the protected twin still gets built.

04

Complete audit trail

Every detection and substitution is logged locally. Exportable as CSV for your internal or regulatory review.

The table no vendor shows

Where does my data go?

Exhaustive list. If something is missing, we forgot it. Write to us.

Original files (PDF, DOCX, emails...)

Stays local

Read in place on your disk. Never copied, never sent.

Anonymized markers (e.g. [a.PERSON_1])

To the chosen AI

Sent to the AI you've configured: Claude, ChatGPT, Azure OpenAI, your internal copilot.

Marker ↔ real value mapping

Stays local

Stored locally on your machine. Never leaves your device.

Crash reports

User-initiated

Nothing is sent automatically. If you hit an issue, you can choose to send the logs to our EU-hosted Sentry, with no file content included.

App update check

Outbound HTTPS

Request to updates.hexagone.ai (EU CDN) to check the available version. No identification.

Last updated: 2026-05-22. Want the technical detail for your CISO? Write to security@hexagone.ai.

Security FAQ

What CISOs ask us, and what we answer.

  1. Q · 01

    Where are originals stored?

    On your Mac or PC only, in the folder you designated. Hexagone AI reads them in place, doesn't copy, doesn't move them. If you uninstall the app, your files stay intact.

  2. Q · 02

    How do you guarantee marker uniqueness?

    A local mapping dictionary stored on your machine. The same name always produces the same marker over time, so AI can reason with consistency. The dictionary never leaves your machine.

  3. Q · 03

    Which AI model do you use for detection?

    Compact models running locally on Apple Silicon or GPU. On request, we provide the exact list of models and versions to your security team.

  4. Q · 04

    What happens if Hexagone AI disappears tomorrow?

    First, this is the project the founders have been working on since their studies, so we are not going anywhere. Beyond that, the protected twin remains a standard folder on your disk. Your original files are intact. The mapping dictionary is exportable to JSON. You keep everything. Hexagone AI is not a single point of failure.

  5. Q · 05

    Do you have access to your customers' data?

    No. None. Nothing ever leaves your machine. You can cut off your internet access and Hexagone AI will still work.

A specific question?

Write to our security team.

Technical audit, architecture diagram, models used, remediation plan: we reply within 48h, in plain language.

security@hexagone.ai