Built fail-safe.
When it is unsure, it asks. When it acts, you can see it. When you say forget, it forgets.
You hold the controls.
A gate on anything irreversible. Send, schedule, share, pay: each one waits for your explicit approval. The gate, not the model, decides.
Autonomy is a dial, not a switch. You set how far it can go, per capability and per skill, starting from suggest-only.
One key stops everything. A kill switch that works instantly, every time, no questions asked.
A record of every action. Everything it does is logged as it happens, so "what did it do" always has an answer.
It listens and looks when you say so. Only then.
The mic is live only while you hold the key. There is no always-on listening and no wake word waiting in the dark. Companion mode reads your screen only when you ask, never in the background. Whenever it listens, records, or looks, the pill shows it, visibly, the entire time.
Guarded like it is ours to lose.
Isolated per user. Your data is separated from every other account at the database layer, enforced by the infrastructure itself.
Encrypted. In transit and at rest, with credentials held in envelope encryption and usable only at the moment of use.
No staff access to content. Our operational logs store hashes and metadata, not your words.
No training on your data. Model providers process your requests under agreements that forbid training on them.
Redaction before memory. Sensitive details are scrubbed before anything is committed to long-term memory.
Forget means forget. The only hard delete in the system is your explicit forget, and it is honored completely.
Immune to whisper campaigns.
Everything Omega Ex reads, files, web pages, email, transcripts, imports, is treated as data, never instructions. An instruction hiding inside a fetched document is surfaced to you, not obeyed. Only your own request authorizes an action.
Beneath that sits a hard denylist that wins even over a spoken yes, and a rule with no exceptions: it runs as you, and it never elevates its own privileges.
Recording, in the open.
A visible indicator whenever capture is live. A one-tap disclosure you can speak or post to participants. Stricter defaults where every party must consent. One-tap stop, and one-tap delete of a recording and its transcript. The full consent design
Two ways to hold the keys.
Included
Model access included with your seat. No keys to paste, nothing to manage, one bill.
Bring your own
Connect your own Claude, OpenAI, or Gemini account. Your account, your bill, and we never see or bill your usage. For regulated work, a zero-data-retention configuration is part of the design.
Cloud models must read your words to answer them. So our promise is strong, controlled privacy: isolation, encryption, no staff access, no training. We will not claim more than that. The honest boundary