“We pay for Harvey at the firm. It's fine for boilerplate, but I just won't put anything actually sensitive into it. The privileged work goes through Muet now.”
Senior associate, AmLaw 100 · New York
A quieter way to work with documents
Private AI for
private work.
Muet reads, answers, and edits documents on your Mac. The work stays where it began.
Word
⌘⇧E100%Tue 2:14
Service_Agreement_v2.docx
Service Agreement
Service Agreement between Client and Service Provider
This Service Agreement (“Agreement”) is made effective as of the Effective Date by and between the Client and the Service Provider.
1. Compensation. The Client shall pay the Service Provider a monthly fee of EUR 8,500, payable within thirty (30) days of receipt of a properly rendered invoice.
2. Term. The initial term shall commence on the Effective Date and continue for a period of twelve (12) months, unless terminated earlier in accordance with Section 9.
3. Confidentiality. Each party shall hold in strict confidence all information disclosed by the other in the course of this Agreement.
4. Indemnification. Each party shall indemnify the other against losses arising from its breach of this Agreement, excluding indirect and consequential damages.
5. Governing Law. This Agreement shall be governed by and construed in accordance with the laws of the State of Delaware, without regard to its conflict-of-laws principles.
mMuet
⌘⇧EActive document
Service_Agreement_v3.docx
You asked
“Is the confidentiality clause strong enough?”
Answer
0 bytes transmitted
localhost30-day money-back · Get release updates
WHAT PEOPLE SAY
Professionals who use it.
“It's slower than Claude or ChatGPT, sure, but the work I do really doesn't belong in either of their chat histories, so the trade is fine by me.”
Senior strategist, private equity · London
“I was dreading setup. It was two clicks. Hotkey opens it, the document I had open is just there.”
M&A partner, boutique deal practice · London
“Half our content team was running client work through personal ChatGPT for a year. We did the training, updated the AUP, blocked some domains. Nothing stuck. Started giving people Muet on their work Macs and the shadow accounts mostly went away.”
Head of IT, content agency · London
“Mostly grant drafts and editing manuscripts. We can't put unpublished work through cloud tools, and this doesn't.”
PI, neuroscience lab · Boston
“Use it for patient letters mostly. Faster than dictating, which is mainly why I tried it.”
Consultant, private practice · Harley Street
“We pay for Harvey at the firm. It's fine for boilerplate, but I just won't put anything actually sensitive into it. The privileged work goes through Muet now.”
Senior associate, AmLaw 100 · New York
“It's slower than Claude or ChatGPT, sure, but the work I do really doesn't belong in either of their chat histories, so the trade is fine by me.”
Senior strategist, private equity · London
“I was dreading setup. It was two clicks. Hotkey opens it, the document I had open is just there.”
M&A partner, boutique deal practice · London
“Half our content team was running client work through personal ChatGPT for a year. We did the training, updated the AUP, blocked some domains. Nothing stuck. Started giving people Muet on their work Macs and the shadow accounts mostly went away.”
Head of IT, content agency · London
“Mostly grant drafts and editing manuscripts. We can't put unpublished work through cloud tools, and this doesn't.”
PI, neuroscience lab · Boston
“Use it for patient letters mostly. Faster than dictating, which is mainly why I tried it.”
Consultant, private practice · Harley Street
“I use it for the contract work I can't put through ChatGPT. Which is honestly most of it.”
In-house counsel, Series C SaaS · San Francisco
“I use it for translating decks when I can't send them out for translation. Saves a few late nights before international meetings.”
Comms director, mid-cap biotech · Zurich
“We looked at Legora and it felt like overkill for what we actually do. This just sits on my Mac and does the small things fast.”
Founding partner, litigation boutique · Chicago
“Session notes don't leave my Mac. That's all I needed to know.”
Clinical psychologist, private practice · Upper East Side
“Genuinely just like it. Hotkey, ask, done.”
Founder, Series A · New York
“I get sent things I shouldn't be reading anywhere except on the laptop they were sent to. Muet doesn't change where the file lives. That's the whole pitch for me.”
Investigative journalist · EU outlet
“I use it for the contract work I can't put through ChatGPT. Which is honestly most of it.”
In-house counsel, Series C SaaS · San Francisco
“I use it for translating decks when I can't send them out for translation. Saves a few late nights before international meetings.”
Comms director, mid-cap biotech · Zurich
“We looked at Legora and it felt like overkill for what we actually do. This just sits on my Mac and does the small things fast.”
Founding partner, litigation boutique · Chicago
“Session notes don't leave my Mac. That's all I needed to know.”
Clinical psychologist, private practice · Upper East Side
“Genuinely just like it. Hotkey, ask, done.”
Founder, Series A · New York
“I get sent things I shouldn't be reading anywhere except on the laptop they were sent to. Muet doesn't change where the file lives. That's the whole pitch for me.”
Investigative journalist · EU outlet
THE PROBLEM
Every AI tool processes your documents on someone else’s servers.
ChatGPT, Claude, Copilot, Gemini — their architectures require your content to leave your machine. Once it’s on their infrastructure it lives in prompt logs, caches, and GPU memory: readable by abuse-review staff, exposed in a breach, retained under terms they rewrite, surrendered to any subpoena. Not a policy choice. The shape of the system.
Your content lives in GPU memory, prompt logs, caches, and embedding stores. One misconfiguration leaks all of it. Samsung banned ChatGPT internally in 2023 after engineers leaked source code through the prompt window.
On the consumer tiers most people actually use, your prompts feed the next model unless you find the off switch. ChatGPT Free and Plus train by default. Microsoft Copilot consumer trains by default. Gemini Apps Activity is on by default. From April 2026 GitHub Copilot Free, Pro, and Pro+ join the list. Enterprise tiers are different. Most users aren’t on them.
Abuse review, safety teams, security investigations, support escalations: all of them require vendor staff to read customer content. Real people, real access, no visibility for you.
Subpoenas, government orders, and discovery compel vendors to produce data regardless of contract. In May 2025 a US federal court ordered OpenAI to preserve “deleted” ChatGPT conversations in NYT v. OpenAI, covering Plus, Free, Team, and most API users. A contract binds the parties. Not the courts.
Under the US CLOUD Act and FISA 702, US-based AI vendors can be compelled to hand over customer data to US authorities, often under a gag order, even when the customer is in the EU or UK. The 2020 Schrems II ruling turned on exactly this. No DPA can override it.
The vendor can also decide to stop serving you. Anthropic’s September 2025 policy restricted Claude from entities >50% owned in unsupported regions. By April 2026 Goldman Sachs had cut its Hong Kong bankers off entirely. A working tool becomes unworkable overnight, for reasons unrelated to the work.
A contract is a promise the vendor won’t look.
Muet is built so they can’t.
Use it standalone, or beside the tools you already pay for.
Muet handles what Claude, ChatGPT and Copilot can’t: the privileged settlement, the patient record, the target-company cap table. Cloud for the public eighty. Muet for the private twenty.
- Claude
- ChatGPT
- Copilot
- Gemini
- Notion AI
- Grammarly
- Perplexity
- Cursor
- Harvey
- CoCounsel
The fatigue trap.
Most professionals end up pasting documents into ChatGPT or Claude paragraph by paragraph, stripping names and anonymising by hand, hoping nothing slips through. A small ritual of paranoia, repeated every day.
Then fatigue wins. The tenth redaction is sloppier than the first, and by the twentieth most people have given up and pasted the whole document in, telling themselves it’ll be fine just this once.
Everyone crosses this line eventually, because the workaround is exhausting and the productivity gain is too large to resist.
How private is private here?
Most “private” AI tools really mean private by contract. The data still leaves your machine, and you’re trusting a chain of promises that no training, no sub-processor leak, no subpoena, and no acquisition will ever break a single link. Real privacy is architectural: the data simply never leaves.
Muet (on-device)Architectural
Runs on your Mac. Documents never transmitted.
On-premise self-hostedOperational
Stays on your infrastructure. Ops secures it.
Enterprise contract (Claude, OpenAI)Contractual
Data reaches the vendor. Contractually not trained on. Still discoverable.
Paid chatbot (ChatGPT Plus, Claude Pro)Default
Sent to vendor. Opt-out varies. 30-day default retention.
Free chatbot / third-party wrappersNone
Sent to vendor and the wrapper. May be used for training.
BUILT FOR THIS
Built for sensitive document work. Not a generic chatbot.
Service_Agreement.docx
§ 1 Compensation
The Client shall pay the Service Provider a monthly fee of EUR 8,500EUR 12,000, payable monthly.
Redline in place.
Settlement.pdf
Whereas
This settlement, effective 15 May 2026, resolves all claims between the parties. Total consideration of €1.25M will be paid within thirty (30) days.
Key terms, extracted.
IMG_4210.jpg
Receipt
Read from photo.
Q3_Revenue.xlsx
Region
Q2
Q3
EMEA
3.2M
4.1M
APAC
1.8M
2.4M
Americas
1.7M
2.2M
Q3 total · EUR 8.7M
Ask the numbers.
Witness_Statement.docx
Statement
Alice Hernandez[REDACTED] confirms she was present at the meeting.
Contact: ahernandez@acme.co[EMAIL]
Redact, ready to share.
Legal review
Contracts, clauses, key terms. On-device means ABA 512 disclosure isn’t triggered the same way.
Financial analysis
Deal memos, cap tables, models, audits. Numbers stay on your machine.
Medical records
Patient files, clinical notes, diagnoses. HIPAA reportable breach if it leaves the device. It won’t.
Images, scans, evidence
Whiteboards, receipts, screenshots. On-device OCR reads it, answers it, extracts it.
Tracked-change editing
Ask in plain language. Muet writes tracked changes back to the DOCX. Open in Word, accept or reject.
Anonymisation
Redact all PII in one pass. Names, addresses, emails, IDs. Returned as a redline.
Spreadsheet Q&A
Ask Excel and CSV in plain language. Parsed natively, never uploaded.
Secure translation
Translate contracts, filings, and case files between languages without sending them to Google Translate or DeepL. Stays on your Mac, formatting preserved.
And many more
Summaries, drafting assistance, meeting notes, filings, depositions, regulatory submissions, tax documents, audit responses, and a steady cadence of new workflows we ship through automatic updates. If it’s on your Mac, Muet works with it.
HOW IT WORKS
Your document never leaves your Mac.
Step 01
Open any document
PDF, Word, Excel, PowerPoint, or an image. In any app you already use.
Step 02
⌘⇧E
Press ⌘⇧E
Muet detects the active document, parses it on your machine, and is ready before your finger leaves the keyboard.
Step 03
Summarise
Proofread
Anonymise
Translate
Compare
Ask anything, or pick an action
Summarise · Proofread · Anonymise · Translate · Compare. Or just type a question. Cited answers, tracked-changes redlines, one-pass PII redaction.
You shouldn’t have to wonder which model is best.
There’s no model picker, no context-length dial, and no temperature slider to fiddle with. Muet tests the available local models, picks the best one for your Mac, and asks once before swapping it for something stronger when one comes along.
You shouldn’t have to wonder whether you’re using the right one, and with Muet you never do.
The better your Mac, the better Muet gets. Automatically.
Muet detects your unified memory and picks the largest model your Mac can run comfortably. Your hardware sets the ceiling.
MacBook Air · 16 GB
Small
MacBook Pro · 24–32 GB
Balanced
MacBook Pro · 48 GB+
Max
On a plane. In a bunker. On the train at 7% bars.
Every other AI tool needs a connection, and when yours drops the work drops with it. Flights, tunnels, bad wi-fi, regulated facilities all add up to hours lost out of your week.
Because Muet runs on your Mac, you can finish a review in the air, edit a contract off-network, or summarise a deposition on the train without waiting for the signal to come back.
No sub-processors. No DPA. Nothing to negotiate.
Most AI compliance work only exists because the data moves. When it doesn’t, most of that work simply disappears.
No third-party processor
GDPR Art. 28 (EU) and UK GDPR don’t apply because Muet isn’t a processor of your documents. No DPA to negotiate, no sub-processor list, no Art. 28(3) terms.
No transfer, no Schrems II problem
Documents don’t leave the device. GDPR Art. 44–49 cross-border rules don’t engage. Same for Switzerland’s revFADP and the UK IDTA.
Confidentiality duties stay intact
ABA Formal Op. 512 and Florida Bar Op. 24-1 (US), CNB September 2024 guidance on secret professionnel (France), §203 StGB (Germany), and the SRA Code (UK) all turn on whether a third party processed client information. With Muet, none did.
Sectoral rules: HIPAA, FINRA, ITAR, GLBA
All trigger on the creation, receipt, maintenance, or transmission of regulated data by a third party. Muet receives nothing. The trigger never fires.
What does cross the network
A license check at activation and update notifications. That’s it. No document content, no prompts, no usage data. Telemetry is opt-in.
No audit surface for your work
Nothing on our servers to breach, subpoena, or inspect. Auditors look at the laptop, the device policy, the invoice. That’s the trail.
How much will you pay
for peace of mind?
Enterprise contracts to silence one vendor’s access run into tens of thousands a year and still send the data; audits cost more on top of that. Muet costs less than a paralegal spends on coffee.
PRICING
One price. One licence.
Founding member · 10% off
Annual licence
$351$390per device, per year
One invoice a year, easy to expense and account for. If Muet isn’t right for your practice, email us within 30 days for a full refund.
30-day money-back guarantee · Limited founding spots
Every licence includes
- Unlimited document Q&A
- Tracked-change editing in Word format
- One-pass PII anonymisation
- Best available model for your Mac, updated automatically
- No data ever leaves your machine
- Offline-first. Works without internet.
System requirements
- Mac
- Apple Silicon (M1, M2, M3, M4 or newer). Intel Macs aren’t supported.
- macOS
- Sonoma 14 or newer.
- Memory
- 16 GB minimum. 24 GB+ unlocks the Balanced model. 48 GB+ unlocks Max.
- Disk
- ~12 GB free for the on-device model.
- Network
- Once for activation and the model download. Then offline forever.
Muet picks the right model size for your Mac automatically. Not sure if your Mac qualifies? Email us and we’ll tell you in five minutes, then refund any purchase that won’t run.
Annual cost for a 5-person team.
Enterprise AI tools come with contracts, seat minimums, and procurement cycles, whereas Muet is a licence you buy one at a time. The real numbers are below.
You pay
Muet5 devices
$0/yr$390 / device / year. On-device. No data leaves.
Claude Team (Standard)5 seats (min)
$0/yr$20 / seat / month, billed annually. Per-session and weekly usage caps. Cloud-only.
Spellbook5 seats
$0/yr$89 / seat / month, Associate tier.
Thomson Reuters CoCounsel5 seats
est. $0/yr$225+ / seat / month.
HarveyEnterprise only
est. $0/yr~$1M+ typical AmLaw annual contract.
Enterprise tool pricing estimated from public reporting. Spellbook, Claude Team and Muet are confirmed public prices.
The app installs itself. We help the organisation around it.
Most people download Muet and simply start using it, but some teams want a paper trail for their CISO, a fleet rollout, or an answer to “why is this safe?” they can put in writing. That’s what this is for.
Tier 01
Personal setup
Solo, not especially technical
A 30-minute remote session. We install Muet, walk through Accessibility permissions, pick the right model for your Mac. You leave ready for your first five questions.
Book a personal setup →Tier 02
Team rollout
Law firm, financial advisory, clinic, 3 to 50 Macs
Bulk licensing. A one-page security brief for your compliance committee. Live Q&A with IT and partners. Shared model defaults, deployment checklist. Remote or on-site.
Plan a team rollout →Tier 03
Enterprise & on-premise
Regulated industry, managed fleets, or sensitive sites
Signed .pkg for Jamf, Kandji, Mosyle. Device-policy configuration profile. Air-gapped installs for SCIFs and clinical networks. CISO architecture review. On-site deployment when needed.
Discuss enterprise deployment →Not sure which you need?
Tell us about your setupTRUSTED BY
Professionals who can’t afford to guess whether it’s private.
- Solo attorneys on privileged work: family, criminal, estate, disputes
- M&A teams reading target data rooms
- Founders drafting pre-patent claims and formulation notes
- Researchers on pre-publication findings and unblinded trial data
- Biotech and pharma on CMC, INDs, and regulatory submissions
- In-house counsel on investigations, whistleblower complaints, NDAs
- Investment banks and buy-side analysts on deal memos
- Family offices and private bankers on UHNW positions
- Journalists and NGOs protecting sources under hostile jurisdictions
- Compliance officers under GDPR, HIPAA, FINRA, ITAR
- HR teams investigating misconduct without naming complainants
- EU employers on employee data under Schrems II
- Executives drafting earnings, layoffs, reorg memos before release
One app. One Mac. One year.
$390 per Mac, per year. 30-day money-back. Apple Silicon, macOS 14+. Nothing leaves your machine.
Not buying today?
Drop your email for new releases, model upgrades, and the occasional note on private-AI workflows. No marketing fluff. Unsubscribe in one click.