01/07
the only AI that cannot tell anyone what you asked it

your files. your machine. no one else.

I know this sounds like a privacy pitch. It is. But it's also just something true that most people have never bothered to think about. Every AI tool you've been using has been sending your documents to a server. The model reads them. A system logs them. Some of it trains future models. Keel runs entirely on your GPU, inside your browser tab. Nothing leaves. Not the question. Not the answer. Not the filename.

i want in
7B model · runs on your machine
0 bytes. not one. ever.
cited answers. page and clause.
works on a plane with Wi-Fi off
close the tab. it's gone.
200-page PDF indexed in 4 seconds
50GB on your disk, not ours
no server ever reads your query
runs on your machine. fast.
0 bytes. not one. ever.
cited answers. page and clause.
works on a plane with Wi-Fi off
close the tab. it's gone.
200-page PDF indexed in 4 seconds
50GB on your disk, not ours
no server ever reads your query

most AI tools are reading your files right now. ours physically can't.

"I had a 200-page due diligence report I couldn't send to anyone. Asked Keel to find every earn-out clause and flag the risk language. Six seconds. Cited every page number. The file never left my laptop."

M&A associate · beta tester

I'm not trying to scare you. Well, maybe a little. But this isn't paranoia. It's literally just what the terms say. Most people just never scroll past the headline.

The biotech founder at 11pm asking an AI to structure the patent filing she's three years from submitting. The M&A lawyer typing deal questions he can't ask his colleagues. The therapist drafting session notes with a patient's name in the document. Every one of those queries hit a server. The model read it. A system logged it. Some of it will train future models.

"But the companies say they don't—" They do. Open the terms. Scroll past paragraph eight.

The AI was never the product. Your information was. That's the business model. That's how the GPUs get paid for. It's not malicious. It's just the deal you agreed to without reading it.

Keel is a different deal. You pay $49.99 a month. Your GPU runs the model. Your disk holds the documents. Your browser contains the conversation. When you close the tab, it's gone the way a thought disappears when you stop thinking it.

Not archived. Not retained. Not flagged for review by someone you've never met.

Gone.

"I'm a criminal defense attorney. What my clients tell me cannot be on anyone else's server. Full stop. Keel is the first AI where that's structurally true. Not just a policy I have to hope they're following."

Criminal defense attorney · beta tester

under the hood

six things other tools
don't bother with.

01

it doesn't just search. it plans the query, runs it from multiple angles, then tells you exactly which page it pulled from.

most RAG tools do one pass and hope. keel breaks your question into sub-queries, runs them in parallel, then scores every candidate through a cross-encoder before writing a word. the lawyer who asks "what are the indemnification obligations?" gets clause 14.3(b). not a paragraph that gestures near it. every sentence traces to a source.

02

there is no server endpoint that receives your documents. we didn't disable it. we never built it.

your login token leaves your browser. your billing status leaves your browser. that's the complete list. the document, the query, the answer. none of it was ever on a wire. you don't have to trust our privacy policy. there's nothing for it to cover.

turn off wi-fi. reopen keel. still works.
03

your GPU runs the model. the researcher waiting for cloud AI round-trips will notice.

keel reads your GPU at startup, loads the largest model that fits your VRAM, and begins. 7B on a base M3 or RTX 4060. up to 70B on an M3 Max or RTX 4090. not throttled by someone else's queue. your GPU, full speed, answers the moment you hit enter. it tells you exactly which model you're running.

04

full postgres query engine. running in your browser tab. 50GB. persists across restarts. no account.

the founder who uploads three years of board decks and asks "when did we first discuss a Series B?" gets a precise answer. not because it's in the cloud. because a real vector database with BM25 and semantic hybrid search ran the query locally. restart your browser. it's still there. always was.

05

the 200-page DD report. the 40-tab excel model. the source code repo. all indexed. all local.

PDF, Word, Excel, Markdown, plain text, code. four browser workers parse in parallel. chunks overlap at boundaries so nothing gets cut. a 50-page document is ready in under 4 seconds. after that it lives on your disk until you delete it. nobody else ever sees it.

PDF · DOCX · XLSX · MD · TXT · code
06

7B on a base M3. up to 70B on an M3 Max or RTX 4090. keel reads your hardware and loads accordingly.

keel reads your GPU at startup and loads the largest model that fits your VRAM. on a base M3 or RTX 4060: 7B, quantized. on an M3 Max or RTX 4090: up to 70B. as the hardware gets bigger, the model gets bigger with it. different hardware. same guarantee: nothing leaves the machine.

pricing

keel is not for everyone.
probably you though.

if you've never thought about what happens to your documents when you use AI, this probably isn't for you. if you have. welcome. flat monthly price. no per-query billing. your GPU does the compute.

free forever
Personal
$0/mo

try it. no card required. if you hate it, you've lost nothing except maybe the assumption that private AI couldn't exist.

  • 7B model · Q4. runs on any modern GPU.
  • 5 documents. 50MB on your disk.
  • hybrid search with page citations
  • works offline. no Wi-Fi needed.
  • cross-encoder re-ranking
most popular
Pro
$49.99/mo

for anyone whose documents contain something they'd be embarrassed to see logged on a stranger's server. you know who you are.

  • everything in Personal
  • 7B to 70B depending on your GPU. tuned for long documents.
  • higher-accuracy embedding. 4K context.
  • cross-encoder re-ranking
  • unlimited documents. 10GB on your disk.
enterprise
Team
Custom

for teams where the legal or compliance person has opinions about what happens to company data. they're right, by the way.

  • everything in Pro
  • 70B model. maximum accuracy. still local.
  • SAML / OIDC SSO. your IdP, not ours.
  • admin audit logs. self-hosted option.
  • written SLA. a real human you can call.
questions people actually ask

answers with no runaround.

"is this actually private or just marketing language?"
fair question. it sounds like marketing. it isn't. there is no server endpoint in our codebase that accepts documents or queries. not a restricted one. not a legacy one. one that was never written. your question goes from your keyboard to a model on your GPU to an answer on your screen. we're not in that chain anywhere.
"what if my GPU isn't powerful enough?"
keel checks at startup. WebGPU based — it reads your GPU and loads the largest model that fits. on a base M3 or RTX 4060: 7B model. on an M3 Max or RTX 4090: up to 70B. the speed depends on your hardware. it'll tell you what it loaded and what to expect. you need a GPU with WebGPU support — most modern dedicated GPUs and Apple Silicon work. the privacy is identical on every tier.
"how much can I actually store?"
free: 5 documents, 50MB. pro: unlimited documents, 10GB sitting on your disk. enterprise: email us. the storage is your browser's filesystem. not our S3, not a database we manage. when you clear it, it's gone. when you don't, it's there the next morning.
"does it work without internet?"
after the first load, yes. fully. the model weights cache in your browser. your documents are on your disk. the lawyer on a flight to Tokyo who uploaded a contract before boarding can ask it a question at 35,000 feet with Wi-Fi off and get a cited answer. we built it this way on purpose. a privacy tool that depends on a connection to function has a contradiction at its core.
"why should I trust a company I've never heard of with my private files?"
you shouldn't have to. and with keel, you don't. your files never leave your machine. whether you trust us is irrelevant. there's nothing for us to mishandle even if we wanted to. you're trusting us with software. that's auditable. we'd rather earn it through architecture than ask for it through a policy you'd have to believe.
early access

you assumed there was
no alternative.

there was. it just took a while to build. we're opening to a small first group. lawyers, founders, researchers, and engineers whose work is too sensitive to hand to a server. if that's you, you already know it. get two months of pro free when we launch.

one email when we're ready. nothing before that.

1,204 people already on the list