See how Locke protects your data
Locke recognizes AI traffic on your device, including eligible services outside its built-in list. Supported requests are screened through the browser extension or a local proxy. Your prompts, files and detections stay on your machine. Your Sonomos account syncs settings, never content. Early Access for x64 Windows and Linux, with macOS coming soon.
On your device
Detection and masking run on your machine.
Off our servers
Your content never reaches Sonomos, so no one can get it through us.
Nothing to breach
What we never hold can't be leaked, sold or subpoenaed.
The app, in Early Access
Click through Locke before you install it.
The real interface with sample data, in Free and Teams views: dashboard, controls, reports, activity, sandbox and team management.
Explore the Locke demoFour sensitive values in, four placeholders out
The AI gets one-way placeholders, never the real values. Locke 1.0 doesn't restore the originals. Reversible tokenization is planned shortly after 1.0.
Summarize the legal exposure for Margaret Chen (SSN 471-83-2914) in case CV-2024-00847. Her counsel at martinez.l@whitfield.law flagged potential HIPAA violations related to patient records shared with third-party vendors.
4 sensitive items exposed to the AI
Summarize the legal exposure for {{NAME_1}} (SSN {{SSN_1}}) in case {{CASE_1}}. Her counsel at {{EMAIL_1}} flagged potential HIPAA violations related to patient records shared with third-party vendors.
0 sensitive items reach the AI. The request still makes sense.
What runs on your device
Each part works on its own. Pick one to see it.
3
Total Unprotected
Prompts sent without full protection enabled
47
Data Detected
Sensitive items flagged by detection across sessions
12
Uploads Blocked
File attachments blocked before reaching AI servers
44
Data Removed
Sensitive items masked with one-way placeholders before submission
Export a hashed PDF report
Timestamps, detection categories, risk levels, actions taken and session context, in an uneditable PDF built from data that never left your machine.
All metrics are computed locally. Nothing is transmitted, stored remotely, or shared with Sonomos.
36 detectors, 70+ categories
Checksum-validated regex plus semantic detection. A sample, by type and risk level.
Locke also screens what never opens a browser tab
Command-line agents like Claude Code and gemini-cli, your own scripts and SDK calls, local model servers you point at it: all screened on your machine.
macOS support is planned.
Background reading: data masking, tokenization and contextual matching. Or compare Locke to other approaches.
