Local-first exception list

Archivist is local-first. Core archive processing runs on your machine. That is product law. It is not the same claim as “zero network calls” or “never talks to the internet.”

This page is the public exception list. It does not certify compliance, restore legal privilege, or replace counsel.

Operational (not your archive)

• Stripe — checkout name/email and payment metadata when live checkout is enabled. Not vault content.
• Vercel — hosting for this website. Not the desktop vault.
• Support email — only what you send to support@archivist.tools.

Corpus adapters (default off)

Optional cloud embeddings or cloud synthesis can send query text, segments, or retrieved context to a provider. They stay off unless you confirm the exact model name that will be used. Saving an API key is not confirmation.

Local (not exceptions)

The vault, search index, receipts, local Ollama/Sovereign on localhost, and the browser extension’s capture path to 127.0.0.1:7742 stay on-device.