Features / Use AI without leaking

Working todayProved in Lean 4

Use AI on sensitive work, without it leaving your organization.

Connect your organization's own AI through its API: a government AI on its own cloud, a company's AI, or a model on your own machines. Documents, Sheets and Slides then work with it on every PC, and the higher levels go only to that AI, never to an outside service.

Stays inside

L3 and above go only to your own organization's AI

No lock-in

ZENOS bundles no model, so you pick the AI and can change it

L2

the highest level an AI outside the government may see

How it works

Connect, check, block

1

Connect

In Documents, Sheets and Slides, register an OpenAI-compatible endpoint (a cloud service, a gateway or a model on your own machine) or Anthropic, with your own API key. A government or ministry connects its own AI the same way.

  • The key is stored encrypted on the device, behind an AI password
  • Until you register one, ZENOS connects to no AI at all
2

Check

Before a file goes to an AI, the same proven rule that guards the clipboard and printer decides whether that AI may hold its level.

  • External AI: up to L2
  • The government's AI: up to L3
  • L4 and above: only the ministry's own AI
3

Block in the network

Once an L3 file has been opened, the packet filter rejects every outside AI for every program on the PC, not only the ZENOS apps. From L4, only the ministry's own AI stays reachable, and new outbound connections are cut while the file is open.

  • The key agent waits for the rule before it opens the file
  • If the decision cannot be had, the answer is block

For governments and companies

With a government AI on the government's own cloud, or a company's own AI, every PC can draft documents, build spreadsheets and make slides with AI, while files at the higher levels never go to an outside service. Lower-level, everyday files can still use any AI you allow.

Proven, and what is not

What is proved, and what is not yet

Proved in Lean 4

Checked on every build

  • No AI ever holds more than its ceiling, whatever the configuration says
  • L3 and above never reach an AI outside the government
  • L4 and above reach no AI but the ministry's own
  • A higher level never makes an AI reachable that a lower one blocks
Trusted, not proved

Tested and listed openly

  • The packet filter goes by the highest level opened on the PC since it started, not by each request; an AI reached at an address ZENOS was never told about is ordinary outbound traffic
  • The AI service you connect, and what it does with what it receives
Download the previewRead the proofsRead the sourceThreat model
← All featuresNext: Distributed storage →