Your data stays yours
Security at Ondes PRO is not a paid add-on: it is built into the architecture. One isolated instance per customer, hosted in France or on your own servers, end-to-end encryption, and AI that can run on your Macs.
- Hosted in Franceor on your servers
- End-to-end encryptedmessaging, Drive, documents
- One instance per customerdedicated database and files
- Local AIon your own Macs
Architecture
One instance per customer, nothing shared
Your workspace is not a row in one big shared database: it is a full application of its own, which only knows your data.
Isolated from other customers
Each company gets its own container, its own database and its own file storage, on its own address. A breach at one customer gives no access to another’s data.
No third-party secrets in your instance
Your instance holds no key to any outside provider. When it needs to send an email or query the AI, it goes through the Ondes platform, with a key that belongs to it alone and is worthless for any other instance.
Encrypted in transit, everywhere
Every connection — browser, apps, real time, relays — runs over TLS. The most sensitive content is also end-to-end encrypted.
Hosted in France
Our servers are located in France and operated by a French hosting provider. Your data does not leave the European Union to be stored.
For technical teams
- Each instance is a separate Docker container, with its own SQLite database and data volumes, published behind a reverse proxy that terminates TLS.
- The instance authenticates to the platform with a secret derived from its identifier: the platform checks who is calling, and an instance can never impersonate another.
- Sensitive files (Drive, object storage, websites) are stored outside any publicly served directory.
- Failures are reported to our team automatically, without request bodies, cookies or authentication tokens.
End-to-end encryption
What is encrypted on your device stays unreadable to us
Messaging, Drive, documents, spreadsheets, presentations and whiteboards are encrypted in your browser or app before they are sent. The server only stores unreadable data.
Your key never leaves your devices
Your encryption key is created on your device and protected by a password only you know. We cannot read it, nor recover it for you.
Sharing stays encrypted
Sharing a file or writing to a group never sends the content in clear: each recipient receives a key only they can open.
Even when collaborating
When several people write in the same document, the server relays encrypted changes it cannot read.
A phone signs in without a password
Scan a QR code: the app receives your key straight from your browser, encrypted with a secret the server never sees.
For technical teams
- One Curve25519 key pair per user; the private key is encrypted client-side with AES-GCM, using a key derived from the password with PBKDF2.
- Drive: one AES-GCM key per file, itself encrypted with your master key; sharing via nacl.box, with Ed25519 signatures for application shares.
- Messaging: nacl.box for one-to-one conversations; for groups, a group key distributed to each member and rotated when someone leaves.
- Docs, Sheets, Slides, Draw: Yjs updates encrypted with nacl.secretbox, relayed without being decrypted.
- QR sign-in: the transfer secret stays in the URL fragment, never sent to the server; the fallback code uses an X25519 exchange with commitment and four emojis to compare.
Enterprise plan
Your instance, on your own servers
With the Enterprise plan, you can host your Ondes PRO instance yourself: application, database and files run on your infrastructure, under your control.
- Wherever you decideYour servers, your server room or your cloud — OVHcloud, Scaleway, Azure or another: all it takes is a Linux server that runs Docker.
- Updates at your own paceWe publish every new version; you deploy it whenever you want, with one command, after testing it if you wish.
- With local AI, everything stays with youCombine self-hosting with local AI: your data and the AI that processes it stay on your infrastructure, end to end.
Recommended requirements
- System
- 64-bit Linux with Docker
- Processor
- 4 vCPU
- Memory
- 8 GB
- Storage
- 100 GB SSD, expandable
- Network
- A domain name and an outbound HTTPS connection
Sized for the Enterprise plan, up to 150 users. We adjust it with you to fit your team.
Request a self-hosted quoteOn quote, with the Enterprise plan.
Local AI
All of Ondes PRO’s AI, served by your own Macs
Turn on “Local AI” mode: the assistant, writing, automations and daily briefing are served by your company’s Macs. It is all or nothing — no request goes to an AI provider anymore.
The Mac only does the thinking
Your instance keeps the tools, permissions and data; it only hands the Mac the request to process. The Mac only receives what it needs to answer.
The right model for each Mac
The app picks the model based on the Mac’s memory: it uses at most 75%, and the Mac keeps the rest to work normally.
Even your encrypted content
End-to-end encrypted messages and files are decrypted on your Mac and read by the local AI: they never pass through a server in clear.
Never a silent fallback
If no Mac is online, the request waits for one and the screen says so. It is never sent elsewhere behind your back.
Included in every plan, with no AI credits counted. Mac with Apple silicon (M1 or later) running macOS 14 or later; Intel Macs use the app without local AI.
Discover the Mac appAccess and accounts
Everyone sees what they should, and nothing more
Roles per module
You decide, module by module, what each role can see and do. Nobody can grant a permission they don’t hold themselves.
Partitioned by project
With several companies or projects, a member only sees the ones they belong to — down to search, notifications and the AI assistant.
Revocable devices
Each connected phone or Mac has its own session, visible and revocable in one click. Changing a password or deactivating an account instantly signs out all its devices.
No password sent by email
Your first access goes through a single-use activation link: you choose your password, then your encryption key.
MCP and API
An AI or an integration only has the rights you give it
Bounded API keys
An API key carries precise scopes that act as a ceiling: it never exceeds the rights of the person who created it, and can neither change roles nor read encrypted messaging.
A safely connected AI assistant
Claude, ChatGPT or your code editor connect with OAuth 2.1 and PKCE. The token lives only one hour, and each connected machine can be revoked in one click.
Test mode first
Writes made by an assistant go to test mode by default: nothing is charged or sent until you decide so.
GDPR
Your data belongs to you, and you can take it back
Data processing agreement
Our commitments as a processor under the GDPR are published and apply to every customer.
Full export
Export all the data in your workspace from the product, at any time, without asking us.
Guaranteed deletion
After cancellation, your data is kept for 30 days so you can retrieve it, then deleted along with its backups. You are notified beforehand.
Our subprocessors
The full list, without exception.
| Subprocessor | Role | Location |
|---|---|---|
| Stripe Payments Europe, Ltd. | Subscription payments | Ireland (EU), with transfers to the United States |
| Vyme SASU (MercuryCloud) | Server and data hosting | France |
| Brevo (Sendinblue SAS) | Transactional email delivery | France |
| Anthropic PBC | Built-in AI assistant | United States |
| LiveKit, Inc. | Video conferencing streams | Server operated by us, in France |
In Local AI mode, no data is sent to Anthropic.
Questions
The questions we get asked
No, not the end-to-end encrypted ones: messaging, Drive, documents, spreadsheets, presentations and whiteboards. They are encrypted on your device with a key we do not have.
In France, with a French hosting provider. With the Enterprise plan, you can also host your instance on your own servers or in the cloud of your choice.
You can reset it with the recovery code given when your key was created. Without that code, encrypted content becomes unreadable, including to us: that is the price of real end-to-end encryption.
No. In Local AI mode, nothing leaves your Macs. Otherwise, the AI is only called with what you submit to it, and its provider commits not to use it to train models.
You do. We publish every new version, and you deploy it whenever you want, with one command.
Yes, at any time, with a full export from your workspace. After cancellation, it stays available for 30 days, then is deleted along with its backups.
Yes. Write to us from the contact page or attach it to your quote request: we answer it point by point.
Let’s talk about your requirements
Hosting with us or with you, local AI, security questionnaire: we build the Enterprise plan with you.
Hosted in France · End-to-end encrypted