That is the whole test, and you can run it yourself in ten seconds without trusting a word we say. Pull the cable, switch off the Wi-Fi, open Ink & Key: your files are there, your notes are there, search works, and the AI still answers questions about your own Library. Nothing is waiting on a server, because the answers were never coming from one.
What that means for you: you never have to take our word for it. Your own router is the lie detector.
A few things do use the internet, and you start each one yourself: the AI download and its updates, the web clipper, and update checks. They all go through a single door in the code, and every build is automatically blocked if any other part of the app tries to open its own. When you check for updates or download a model, the app sends your licence key, a random device ID and the app version — never your files or notes. The Annex doesn’t use it at all — it just writes a copy to a folder on your own disk.
What that means for you: the app can’t secretly go online.
Yes, the app touches the internet — how else would you get updates? (And we’ll never force you to update.) But if its settings ever get corrupted, it wakes up assuming offline, never online. And every build plants a deliberate rule-breaker to prove the guard actually catches it.
What that means for you: even on its worst day, the app fails toward silence — not toward the internet.
A promise you can check is worth more than a promise you have to believe.