Your people get a full AI workspace across any model, the real browser, files, your apps, and your internal systems. Your organization keeps the permissions, proof, and oversight on the whole time. It is the same Cuttlefish a single person uses, with an admin layer on top — not a stripped-down work edition.
Permissions, data boundaries, and the record don't depend on anyone remembering to switch them on. They apply to every person, every tool, and every action by default.
Cuttlefish reads and prepares within the access your organization allows. Changes follow its policy and existing grants, with additional approval requested when required. Authorized people can use the paired phone features to review work while away from the desktop.
Nothing goes to an outside AI provider unless someone chooses to send it, and a model running on the person's own machine processes the exchange there, with no provider in the loop. Conversation history and memories are saved to the organization's Cuttlefish account. Keys for local models live in the device's secure store; cloud provider keys are stored encrypted in our credential service.
For anything meaningful, you keep a tamper-evident record of what was used, what changed, who approved it, and where the result went. It reads as plain proof — no log diving — and an auditor can confirm it's genuine and unaltered.
Connect an approved environment and define the systems and operations your organization permits. Cuttlefish helps assistants work within those limits, requests approval where required, and keeps available action evidence for review.
A single manifest declares the systems, contracts, and limits Cuttlefish is allowed to work with.
Only the operations you approved become usable. Everything not declared stays out of reach by default.
Each capability is marked read-only, prepare-only, approval-required, or blocked — so the routine stays fast and the serious stays deliberate.
Work runs under your organization's terms. Consequential moves pause for a sign-off; sensitive values stay hidden; outbound access stays inside your boundaries.
Every real action attaches evidence and a tamper-evident record — what it used, what it changed, who approved it — that reviewers and auditors can verify.
A connection starts able to do nothing. You allow specific actions on purpose, set the limits, and can take any of them back at any time.
Connect your code repositories, infrastructure, cloud accounts, ticketing, and the in-house tools you built yourself. Each system declares the operations it exposes and the contract behind them, so Cuttlefish works in the real system rather than a copy.
Name the internal consoles and pages Cuttlefish may operate in, and the web addresses it's allowed to reach. Requests can't wander off to places you didn't approve — inspection stays read-only, changes wait for approval.
Set where proof comes from, which actions need a sign-off, and which are blocked outright. Anything not declared is unavailable by default, so an unknown action is a closed door, not an open one.
The same Cuttlefish can appear as a workspace tuned to how a particular team works — its language, its workflows, its sensible defaults. Surface Packs change what people see and do; they never grant authority by themselves.
A workspace shaped around tickets, environments, and client operations, with the connected tools and approval steps an operations team relies on. See the dedicated route for MSP & IT operators.
A workspace tuned for infrastructure, deployments, and code work — the real browser, your repositories, and governed actions against the systems you run. See the route for platform engineering.
Read-mostly workspaces for reviewers, support, and executive oversight — proof, run history, and approvals front and center, with consequential actions still gated behind a clear yes.
Enterprise identity and administration define who belongs to the organization, which environments and providers they may use, who can approve consequential work, and who can retrieve evidence. Inside that boundary, each agent runtime retains its own identity, task state, model assignment, capabilities, lifecycle, and operating surface.
Every piece of governed work stays bound to the organization, person, and environment it belongs to, so personal and organization-managed state remain distinct.
Local models, approved hosted providers, and organization-managed compatible endpoints can operate under the same identity, policy, approval, and evidence boundary.
Cuttlefish preserves saved work, approvals, results, and action evidence independently of one model interaction or visible window.
Admins can manage membership, environment access, provider and connector policy, approvals, revocation, lifecycle controls, and evidence retrieval.
These aren't separate products. They're settings on the same workspace — turn on what you need, and your work, apps, and controls come with you.
Cuttlefish has desktop installers for Windows, macOS, and Linux. A compatible model running on the same computer performs inference there without an outside AI provider. Account history and memories are still saved in hosted services; a network or private-cloud model processes requests at its configured endpoint.
Connect the biggest external models and shared tools when you want their reach, and let work follow people across devices. Nothing goes out unless it's connected and chosen — you decide what reaches the outside, task by task, under one set of controls.
For organizations that need everything inside their own boundary, Cuttlefish supports deployment where prompts, retrieval, model inference, tool execution, memory, governance, and audit all stay inside the enterprise perimeter — nothing leaves the lines you draw.
People can use cloud models, models running privately on their own machine, or your organization's approved providers — and switch between them — while you keep one set of permissions, approvals, and records across all of it.
You decide which models and providers are available to the organization — ChatGPT, Claude, and others — and people pick the right one per task.
Route work to inference that stays inside your own boundary, so sensitive prompts and data don't reach an outside provider's servers.
First-class support for private models running on a person's own computer through Ollama, LM Studio, and custom endpoints — prompts and answers are processed on that computer, with no AI provider involved.
Whichever route a model takes, the same permissions, approval steps, and tamper-evident records apply. Freedom for the user; one consistent surface for you.
People sign in with the accounts they already have, you decide who can do what, and you see plans, usage, and invoices in one place. Your people don't learn anything new.
People sign in through your existing identity provider, using the login they already trust — no extra password to create or reset.
Access follows your directory: people are added when they join and turned off when they leave, in step with your other systems, so the list of who can use Cuttlefish keeps itself current.
Assign roles that decide who can administer, who can approve, and who can connect new tools. A dedicated admin area holds your people, connected systems, and organization-wide terms — separate from anyone's personal settings.
See your plan, subscription, invoices, and model usage in one place. Usage is metered as your team works, so finance sees what's adding up without assembling a spreadsheet.
Authorized reviewers can inspect available work records, required approvals, and supporting evidence. These records may contain task information; share them only with appropriate permission to their content.
Reviewers and admins see what is running and what was approved, in plain language, without needing anyone technical to interpret it.
Signed records for governed actions let an authorized reviewer inspect attribution and record integrity. Associated evidence supports review of the outcome. Share records only with appropriate access to their content and supporting material.
If something ever looks wrong, an administrator can halt outside tool activity at once and revoke any permission previously granted — and the change takes effect immediately.
The control model is built to be reviewed. Two pages give your security, privacy, and compliance reviewers what they need to evaluate Cuttlefish in detail.
How permissions, approvals, data boundaries, redaction, and the stop control work, with the specifics a security reviewer asks for. Read the security review.
What stays on the device, what reaches the outside, and what is saved to your account — the privacy posture in plain terms. See trust & privacy.
A guided walk through connecting an environment, classifying its actions, and putting the controls in place before anyone relies on it. Start enterprise setup.
Start with one system and one team in a pilot, then widen the circle as trust builds — the same controls apply all the way up.
