EN ▾

Local checkpoint · Enforceable proof · GDPR · AI Act

The local checkpoint that proves, for professionals bound by secrecy.

Your documents only cross the line pseudonymised. The AI's reply comes back under supervision. Every crossing leaves a proof you can produce — verifiable without us, without a network, ten years from now.

Request access See the chain of proof

Patented processes — FR2607944 · FR2609690 · Designed and built in France

0network connections, attested by the operating system

9links in the chain of proof

2patent applications filed (INPI)

6countries benchmarked every night

5,600+automated tests

0cookies, trackers, telemetry

One checkpoint, four building blocks

Between your documents and the AI, a checkpoint on your own machine. Nothing crosses in clear, nothing comes back unchecked, everything is recorded.

Inspection before crossing

Three-layer detection, human review line by line, full preview. Nothing crosses the line without having been seen.

Carried by Pseudonomia · JUNAO

Seals

The mapping table lives in an encrypted vault, with its own password and an optional hardware second factor. No key is ever held by a third party.

Carried by Pseudonomia · FIDO2 keys

Supervised return

The AI's answers come back occurrence by occurrence, validated by you. Restoring is a deliberate act, never a reflex.

Carried by Pseudonomia · AI checkpoint

Crossing register

Sealed hash-chained log, signed audit on every export, qualified timestamping. A proof your DPO or a judge can verify without us.

Carried by the chain of proof

Three lanes, two gates, zero network calls

The right lane for every crossing — from a snippet pasted in one second to a whole case file kept consistent over time.

ExpressA snippet, one secondKeyboard shortcut, clipboard, menu bar. A control flash on the way out, instant return.PseudoExpress

StandardA documentWord, PDF, RTF, text, scans with OCR — twenty formats, always local, layout-faithful export.Pseudonomia · PseudoDocExpress

In-depthA whole case fileSame pseudonyms across every document, professional roles, k-anonymity measured at case-file level.Pseudonomia · Mode 3

PocketFrom your phoneiOS and Android, offline, nothing written to disk, licence verified without a network.PseudoMobileExpress

Two gates to the AI: the local MCP bridge (documents arrive under neutral names, DOC1, DOC2) and universal copy-and-paste. LexLabs never calls an AI API: the checkpoint is agnostic, with no key and no cost imposed.

Where is the line?

What matters is not "local or cloud" but where the clear-text document is read, who holds the seals, and whether an enforceable register exists.

	On your machineLexLabs	At a French hosting provider"sovereign" cloud tools	At a third party outside the EUchatbots, AI APIs	Nowherewild copy-and-paste
Who reads the document in clear	You alone, on your machine	The host, under contract	The model and its operator	The model, with no contract
Who holds the seals	An encrypted vault, with you	The vendor, sometimes client-side	Nobody: nothing is sealed	Nobody
The AI's reply	Supervised, occurrence by occurrence	Often automatic	No return	No return
Enforceable crossing register	Sealed log, signed audit, verifiable by a third party	A report, rarely cryptographic proof	No	No
Professional secrecy	Preserved: nothing leaves	Hanging on a contract — in France, art. 226-13 is criminal law	Broken	Broken

Every crossing leaves a proof

Nine links, which any third party can verify without LexLabs, without a network, ten years from now. Here are five of them.

1Zero network, attested by the operating systemA permanent "Network: 0 connections" witness, read from the operating system, and a logged kill-switch.

Verifiable: copy the command, run it.

2Ed25519-signed auditOne file per export: who did what, with which version, on which entities, with which measured k.

Verifiable: signature checked offline.

3Sealed hash-chained logEvery sensitive action chained by SHA-256, numbered, signed. A gap or a reset shows.

Verifiable: the chain checks in one command.

4eIDAS qualified timestampAn RFC 3161 token from a qualified provider on the log anchor: a legal presumption of date.

Verifiable: the provider's standard tools.

5Standalone verifierA single HTML file shipped with every export. Double-click, drop the audit and the document: verdict.

Verifiable: in any browser, without lexlabs.fr.

What the proof does not prove yet

Qualified timestamping awaits the key ceremony: the trust-root store is deliberately shipped empty until then.
A measured k-anonymity is still pseudonymisation: the re-identification risk is reduced, not erased.
Pseudonymisation reduces the risk, it does not remove it: you validate before anything is released. All published limits →

The nine links, and how to verify them →

Pseudonymise locally.
Restore under control.
Prove every crossing.

Your documents stay on your machine; your diligence, though, becomes verifiable. The engine that carries these guarantees is called JUNAO, and its name says what it does:

JournalisedUsed offlineNon-reversibleAuditableOpposable in evidence

For professionals bound by secrecy

Those whom the law binds, and for whom a hosting contract is no substitute for criminal law.

Court-appointed expertsart. 11 CPP → 434-7-2 CP Lawyersart. 66-5, Act of 1971 Physicians & medical expertsart. L.1110-4 CSP Chartered & forensic accountantsord. 45-2138, art. 21 DPOs & complianceart. 38 GDPR Public administrationsCGFP L.121-6

The offer: the elements of the checkpoint

Each element plays a part in the checkpoint or in the proof. Pseudonomia is the workstation; it is not alone.

Desktop checkpointPseudonomiaCase files, three modes, Mode 3 consistent over time, inline review, log, per-module licences. Mac and Windows.Discover (in French) → Express lanePseudoExpressThe direct link with your AIs, browser and Office: clipboard, shortcut, menu bar.Discover (in French) → Document lanePseudoDocExpressWord, PDF, RTF, text — built-in OCR, 100% local, faithful export.Discover (in French) → The checkpoint in your pocketPseudoMobileExpressiOS and Android, offline, nothing on disk, return always free.Discover (in French) → Gate to the AIAI checkpointThe local MCP bridge: checkpoint sessions, documents under neutral names, two-level log, deliverables restored under supervision.Discover (in French) → EngineJUNAOThree-layer detection, GDPR tiers, seven professional templates, six methods, k measured against the INSEE population, benchmarked every night.Discover (in French) → SecurityFIDO2 hardware keysTwo keys, two layers of encryption: a stolen password alone opens nothing.Discover (in French) →

Built around the law

GDPR — art. 4(5), 25, 32; EDPB Guidelines 01/2025 AI Act — "high-risk" obligations applicable since 2 August 2026 Professional secrecy — art. 226-13 CP, art. 11 CPP eIDAS art. 42 — qualified timestamping Designed, built and run in France

GDPRRegulation (EU) 2016/679 — pseudonymisation, Art. 4(5) and 32

AI ActRegulation (EU) 2024/1689 — control over data sent to AI

CNIL doctrinePseudonymisation aligned with CNIL recommendations

EDPBAligned with the 01/2025 guidelines on pseudonymisation

Access is by approval

We open access progressively, profession by profession. Tell us your need: we get back to you within 48 hours.

Request access

Or let's talk first: book a meeting.