EN ▾
DE ES FR IT
Home › Checkpoint

A checkpoint on your own machine

Between your documents and the AI: inspection before crossing, seals, a supervised return, a register. Nothing crosses in clear, nothing comes back without you, everything is recorded.

The four building blocks

In the order a document goes through them. Each block is carried by an element of the offer.

1 · Inspection before crossing

Nothing crosses the line without having been seen

Three-layer detection (rules, language models, context), human review in the list and in the text, full preview before export. On the express lane, a control flash on the way out. French and European identifiers: NIR, SIRET, RPPS, IBAN, court references, institutions.

Six pseudonymisation methods (in French) →
2 · Seals

The mapping table in a vault

Encrypted with Argon2id + XChaCha20-Poly1305, under its own password, distinct from the master password: the separation of additional information the EDPB requires. Optional FIDO2 hardware second factor, two keys, two layers. No key is ever held by a third party.

EDPB Guidelines 01/2025 (in French) →
3 · Supervised return

Restoring is a deliberate act, never a reflex

The AI's answers come back occurrence by occurrence, validated by you. Third parties the AI may have introduced are detected. Every restoration is logged (EDPB ¶109).

Supervised de-pseudonymisation (in French) →
4 · Crossing register

A proof your DPO or a judge verifies without us

SHA-256 hash-chained sealed log, Ed25519-signed audit on every export, two-level AI log (observed / declared), optional qualified timestamping, standalone verifier shipped with every export.

The chain of proof →

Three lanes, two gates

The right lane for every crossing, from a snippet pasted in one second to a whole case file kept consistent over time.

Express lane

A snippet, one second

Keyboard shortcut, clipboard, menu bar. A control flash on the way out; instant return, because nothing leaves the machine.

PseudoExpress (in French) →
Standard lane

A document

The crossing window: twenty formats read, built-in OCR for scans, layout-faithful export. Word, PDF, RTF, text, spreadsheets.

PseudoDocExpress (in French) →
In-depth lane

A whole case file, over time

Mode 3: the same pseudonyms across every document, professional roles, case-file lifecycle, k-anonymity measured at case-file level. Subject of patent application FR2607944.

Project Mode (patented) (in French) →
Two gates to the AI. The local MCP bridge (AI checkpoint, Claude Desktop today, other MCP hosts tomorrow): the AI receives the documents under neutral names, DOC1, DOC2, and never sees the original; deliverables are restored under supervision. And universal copy-and-paste, for any AI. LexLabs never calls an AI API: the checkpoint is agnostic, with no key and no cost imposed. A second mouth is planned: a browser extension coupled to the local application, with no third-party server.

Where is the line?

What matters is not "local or cloud" but where the clear-text document is read, who holds the seals, and whether an enforceable register exists.

On your machineLexLabsAt a French hosting provider"sovereign" cloud toolsAt a third party outside the EUchatbots, AI APIsNowherewild copy-and-paste
Who reads the document in clearYou alone, on your machineThe host, under contractThe model and its operatorThe model, with no contract
Who holds the sealsAn encrypted vault, with youThe vendor, sometimes client-sideNobody: nothing is sealedNobody
The AI's replySupervised, occurrence by occurrenceOften automaticNoneNone
Enforceable crossing registerSealed log, signed audit, verifiable by a third partyA report, rarely cryptographic proofNoNo
Works without the InternetYes, entirely, by designNoNoNo
Professional secrecyPreserved: nothing leavesHanging on a contract; in France, art. 226-13 is criminal lawBrokenBroken

Three modes, chosen when the case file is created

The same vocabulary as the Pricing page, from the most direct to the most protective.

Mode 1

Direct pseudonymisation

One document, one gesture: detect, review, export. Everyday work.

The 3 modes in detail (in French) →
Mode 2

The case file

Several documents, one pseudonym table: Mr Durand stays "PERSON-1" everywhere.

Project Mode (patented) (in French) →
Mode 3

Enhanced protection

k-anonymity measured against the real INSEE population, continuous signed EDPB compliance score.

k-anonymity (in French) →

What does not change: nothing leaves

Zero network, attested

No cloud, no third-party server: the "Network: 0 connections" witness is read from the operating system, and you can check it yourself.

Why local (in French) →

AI, user guide

Plane, courtroom, dead zone: the checkpoint works without a network. How to work with an AI without handing it your identities.

AI: user guide (in French) →

Modes and professions facing LLMs

Which mode for which profession and which use of AI: expert reports, advice, medicine, accounting.

Modes & professions vs LLMs (in French) →

See the checkpoint in real conditions?

Access by approval, reply within 48 working hours.

Request access