A desktop intelligence layer that reads your week, remembers what you promised, and protects the hours that make the work possible — entirely on your own machine.
Invitation only · €129/month · macOS available, Windows coming
Filters, labels, snoozes, priority inboxes, AI that writes replies faster — the entire category is built around moving messages out of sight more efficiently. It works, in the narrow sense. The inbox gets emptier. But nothing in that stack has ever asked the question you actually carry around all day: what does all of this mean, and what does it mean for this week?
So the real work stays with you. You are the one holding the fact that you promised someone a document on Monday, that a negotiation has gone quiet for nine days in a way that should worry you, that the thing due Friday needs four uninterrupted hours you have not scheduled and will not get if the week continues as it is. That knowledge lives in your head, degrades under load, and surfaces at 2am rather than at the moment it would have been useful.
Sovereign is built for that layer instead. It reads the same inbox and the same calendar as everything else, and then does the part nobody has automated: it works out what is actually happening across your commitments, your relationships and your time — and tells you, once, each morning, in plain language.
Not features you operate. Conclusions you are handed.
One short read at the start of the day: what genuinely needs you, what can wait, and what changed overnight.
Which of your important correspondents are drifting — slower replies, longer silences, a thread that quietly stopped.
Every promise you made in writing, pulled out of your sent mail and held until you have actually kept it.
Your week as pressure rather than boxes — where the load actually falls, and where there is still room to put things.
A weekly measure of how the week was actually lived — deep work, kept deadlines, protected time — computed from behaviour, never self-reported.
A long, tangled negotiation compressed into where it stands, what was decided, and what is still open.
Not a policy promise layered over a cloud. A property of where the data sits.
Your mail, your calendar, your commitments, your scores — all of it is stored locally on your own computer. There is no copy of your inbox on our servers, because there are no servers holding user content at all.
The keys to your mailbox are held in your operating system's own secure credential store and are never transmitted to us, never written into a file you could accidentally share, and never visible to anyone but you.
Sovereign reads your mail, and — only when you tell it to — archives a thread or sends a reply you have approved. It has no ability to delete a message or empty a mailbox, and it never asks for the permission that would let it.
There is no usage analytics, no behavioural telemetry, no quiet stream of what you opened and when. Nobody — not us, not an employer, not an administrator — gets a dashboard of how you spend your day.
Your data will not be sold, brokered, or used to train anyone's models, and there will never be an advertising surface in this product. You pay for the software, so the software has no reason to want anything else from you.
Erasure is a single gesture on your own computer, not a support ticket and a 30-day wait. When the app is gone, the data is gone, with nothing left behind on our side to request, verify, or take on trust.
Sovereign uses AI for a handful of things: the morning brief, situation synthesis, drafting. When you ask for one of those, the request it sends contains text drawn from your mail, and that request travels off your machine to reach an AI model. We route it through a privacy relay that strips identifying details on the way, and it is never stored — but we are not going to pretend it never happens.
So the honest version is this: local-first does not mean nothing ever leaves. It means your data is never stored anywhere but your own machine, nothing leaves without you asking for it, and most of what Sovereign does — the relationship signals, the ranking, the silence detection, the scoring — is worked out on your device and never leaves at all.
Ma is the Japanese idea of intentional negative space — the charged interval that gives the surrounding form its shape. Sovereign treats your unscheduled time exactly that way: not as a gap waiting to be filled, but as the thing that makes the rest of the work possible.
In practice this means the system defends time you would give away. A deadline that lands on a Saturday does not get scheduled onto your weekend; it gets routed back into the week, with quick work pulled to Friday and demanding work placed where you will still have the capacity for it. Rest is not a setting you enable — it is a boundary the system holds even when you would not.
And because it is structural rather than cosmetic, it is measured. Sovereign tracks whether your protected time actually stayed protected, and only credits you when there was real pressure to protect it against. An empty week does not score as a well-defended one.
What you deliberately leave out — of the weekend, of the cloud — is the architecture, not the absence of it.
Same intelligence, tuned to what actually matters in your field.
Deal terms, amounts and counterparties surfaced first — plus which live processes have gone quiet on the other side.
Deadlines, obligations and undertakings extracted as they appear, with the clock on each one visible before it runs out.
Decisions waiting on you, commitments made in your name, and where your week is over-committed before it starts.
Sources, embargoes and pending confirmations tracked together — including who you promised what, and when.
Everything in Sovereign, billed monthly. Cancel whenever it stops earning its place.
The same thing, paid yearly — twelve months for the price of ten.
Access is by invitation. We onboard in small groups so that every account gets set up properly, and so the product stays shaped by people who actually use it this way.
Request an invitation →
We read every one of these. The last question matters most.