The AI runs in your office
The assistant and its models run on the server you own. No cloud AI provider receives a client's name, a document or a question. Ghalixy has no cloud account that holds your data, and the product sends no usage data to us.
For offices
Client files that never leave your office.
Ghalixy AI is one private server for a small professional office: everyone's mail, calendar, notes and files, and an assistant that works on them, all on a machine in your own space. It is built for practices that owe their clients confidentiality, immigration practices above all, where a file holds passports, histories and statements that nobody else should read.
Client confidentiality
In product terms, not promises.
What follows is how the product behaves. It is not legal advice, and it does not by itself make a practice compliant with its regulator's rules: that stays your responsibility. It does mean there is no third party holding your clients' documents.
Each person has their own space
Every lawyer, consultant and assistant signs in as themselves, with a passkey or a security key. Mail, notes, chats and the assistant's memory belong to one person. Another person sees a file only when it is shared with them by name.
Sealed folders
A folder in Files or Notes can be sealed. A sealed folder is kept out of the assistant's search entirely: it can't read it, summarise it or quote it, and can't even list its name. A sealed folder can't be shared. Encrypting the sealed contents with a key made from your passkey is not built yet Coming.
Nothing goes out without a person
Sending an email, deleting a file or sharing one waits for approval, on screen or with a tap on your phone. The assistant can draft a letter to IRCC or to a client, but a person sends it.
You can see what leaves
The few things that do reach the internet, like an email you approved or a web search you asked for, are written in the egress log in Settings, then Privacy. Mail, notes, files, chats and memories are never part of anything the product sends on its own.
Reached privately
The server is reached by the Ghalixy apps over their own private tunnel, not by an open door on the internet. Signing in from any browser is a switch that is off until you turn it on.
Immigration practices
What it is for in a day's work.
Summaries of files
Drop in a PDF, a statement or a letter and get the key points, dates and what is missing, without the document leaving the server.
Answers from your own folders
Ask a question across the folders you allow. Every answer quotes the passage it found and links the document.
Drafts for review
Letters, emails and replies drafted in your voice, in English or Arabic, ready for a person to review and send.
Mail and calendars you already use
IMAP and CalDAV accounts, including Gmail, Yahoo and Fastmail. Microsoft 365 and Outlook.com are not supported yet.
The assistant is typed to in English and Arabic. Spoken replies are English only.
Setup
From demo to daily use in about two weeks.
One engineer from the first call to support: the person who demos it installs it.
Demo and assessment
A 15-minute demo, at your office or by video, then a short look at your team size, your mail system, your documents and what would save the most time.
Hardware
We spec a quiet workstation sized for your team. You buy it from a retailer at cost, or we source it, and the manufacturer's warranty stays yours. It sits in your office.
Install and training
We install and secure it, connect your mail, calendars and document folders, set up each person's passkey and your recovery card, and train the team in two short sessions.
Care
Monitoring, updates, model upgrades and backup checks each month, and a person to call. Prices are in Pricing.
Support
Support never sees your clients' data.
No standing way in Coming
Ghalixy keeps no account, key or open door on your server. When you ask for help, an administrator in your office opens a support session, chooses what it reaches and for how long (an hour by default, four at most), and approves it with one tap.
System state only Coming
A session shows health, services and logs with names, addresses and content removed. It never shows people's data, and there is no setting that changes that. When something inside your data needs fixing, your administrator does it while we guide.
You watch and you end it Coming
Every page opened and every command run is in a record your administrator can read, and the administrator can end the session at any moment. A diagnostics file, if you want to send one, is read by your administrator before it is saved, and is never sent by the server itself.
Until support sessions are in a release you can install, we help by what you tell us and what you choose to send. More is on the security page.
Want to see it with your own kind of file? Book a demo