Custody model
Local-first
Capture, notes, voice, packets, calculations, and exports work locally before cloud sync.
Scoped providers
Cloudflare handles hosting, API, account-session storage, synced records, media, packet links, and bot protection. Stripe handles Anvil billing; Stripe receives payment-link details only after you configure and confirm them. Resend handles transactional mail. Cloud AI receives only text you approve.
Export before delete
Owners can prepare a full export, revoke share links, and request account deletion from the Trust Center.