Bolt by Sparcle

Sensitive and regulated data is flowing into AI.
Can you prove where it went?

39.7% of data moving into AI tools is sensitive (Cyberhaven, 2026).¹ The average breach now costs a record $4.99M (IBM, 2026).² Bolt by Sparcle answers on the device first, and most of what it does needs no AI model at all. When AI is needed, it uses the AI your organization chose, with sensitive data masked first.

Answers on the device: no model call, nothing leaves
When AI is needed, it uses the models your organization chooses, on your keys
Masks sensitive data first; every event is signed and auditable offline

See what is leaving Walk through your architecture

30-day Discovery Pilot, up to 10 seats, no server to install. Just for you? Download Bolt free for Mac, Windows and Linux.

For your security team · 1:30 Bolt + Aeira: the full story Why your AI lives in your network, not theirs

Click the video to watch full view with audio.

30-day Discovery Pilot, up to 10 seats, no server to install. Just for you? Download Bolt free for Mac, Windows and Linux.

ProductivityGovernanceProvenance

The Sparcle stack sits where all three meet, without giving up sovereignty, privacy or security in the AI era.

Governance that is yours, not your model's or vendor's: swap either and the same policy, masking and audit keep applying.

Runs on your servers, with your keys. Verify it yourself.

Two products, one boundary.

BoltAI workspace on your device. Secrets masked before AI.

AeiraSelf-hosted, permission-aware enterprise search.

What it costs you not to

The numbers behind the question.

$4.99M

Average cost of a data breach

Global average in 2026, a record and up 12% on last year (IBM).²

92%

Had no proper AI access controls

Of the organizations that reported an AI-related breach. Only 40% of all organizations use access controls on AI models and data (IBM, 2026).²

Up to 4%

GDPR ceiling on worldwide turnover

For the most serious infringements: EUR 20 million or 4% of worldwide annual turnover, whichever is higher.³

Published averages and legal ceilings, not predictions for your company. In 2023 Samsung restricted staff use of generative AI after engineers reportedly pasted source code into a chatbot.⁴

Both usual answers lose

Block AI and lose productivity. Allow it and lose control.

Bolt is the third way: answer on the device, use the AI your organization chose, and prove every move.

78%

of CISOs call GenAI a security risk

85% say enabling safe AI use is a priority.⁵ And 39.7% of data moving into AI tools is sensitive.¹ Bolt masks it before a prompt leaves, warns before a secret goes to an AI site, and streams the audit to your SIEM. Start a 30-day pilot and see what leaves today.

$4.99M

what the average breach now costs, a record

Uncontrolled AI spend and vendor markup are how the bill grows.² Bolt runs on your own keys and rates with zero token markup, and most of what it does needs no model call at all. See pricing.

Provable

when a regulator asks where it went

Policy is applied before data leaves. In organization deployments the audit chain is Ed25519 signed, Merkle chained and verified offline with a standalone verifier, by your auditor, not by us. Read the security and compliance detail.

86.9%

of organizations delayed AI rollouts over data risk

Unblock yours.⁶ One governed surface, SSO and SCIM on your identity provider, open protocols (MCP, ACP). Swap the model or provider and the policy stays. See the architecture.

For individuals

Stop pasting your work into someone else's AI.

Get the answer without sending the data. Free, no account, no time limit, offline, on Mac, Windows and Linux.

Paste anything

It decodes and computes locally. 80+ utilities, most with no LLM call and no egress, so what you paste stays on your machine.

One app instead of about twenty

The tools you keep a browser tab open for, in one place, working the same way with the network off.

Summon it over any app

It arrives already carrying context from what is on screen, so you are not copying things into it first.

Search what you actually have

Apps, files, clipboard, vaults, emails, meetings, and inside images with OCR and an opt-in local vision model.

Recall, without recording your screen

Built from lightweight OS signals, not screen recording. Text recall today.

Bring a model, or bring none

Works out of the box on a free model, or point it at your own key or your own provider. Zero token markup either way.

Bolt, running · click for the narrated 1:00 One hotkey. Everything you have. Your day, your inbox, your clipboard, your terminals, your notes

Real product, running. Click it for the narrated walkthrough.

You are warned before a secret goes to an AI site. Verify it yourself. Free for individuals on Mac, Windows and Linux.

Download free for Mac, Windows, Linux See the offline utilities

Prefer the terminal? One-line install on every platform, same signed build. Already using it at work? Here is the governed version.

Other AI tools make every question a model call in another window. Bolt doesn't.

Saves tokens

80+ utilities and rule-based picks, most with no model call

Saves time

What you need is shown before you ask

Saves the switch

Summoned over any app. You never leave your work

Encrypted clipboard and notes, private on-device recall, and local file search. Recall is built from lightweight OS signals, not screen recording.

Before you ask

What you need to know, before you need to ask.

The three-minute detour, done in a glance. No new tab, no app switch, no waiting on a model.

The One Thing

The single most important action across your email, calendar and tasks, with the reason. Picked by rules, no AI needed.

Your day, at a glance

Next meeting, today's schedule and what to do next, worked out on your device from what is already synced.

Already recognized

Copy a tracking number, an ID or a date and Bolt has the card and its next action ready when you open it. No tokens.

Your team is already using AI. Keep the policy in your hands.

Your team carries sensitive data into AI tools every day, and agents now act on it with no one reviewing. Policy held by a vendor is policy you cannot verify or take with you. Bolt applies yours at your boundary, masks what must not leave, and leaves a record your auditor can check. One vendor's telemetry found 39.7% of data movements into AI tools involve sensitive data.¹

Start a pilot See pricing

Discovery Pilot is 30 days and up to 10 seats with no server to install. Pilot is 90 days and up to 30 seats in your own infrastructure. Or walk your architecture through with us first.

29 packs, plus yours

Built in, plus your own recognizers and agents as signed .boltpack bundles

Sealed audit chain

In organization deployments, Bolt's and Aeira's audit chains are Ed25519 signed and Merkle chained, verified offline with a standalone verifier

On-prem, VPC, air-gap

Self-hosted wherever your data is required to live

Cuts token spend, breach exposure, shadow AI and shadow IT. Works with Okta, Entra ID, Google Workspace, Auth0, Zoho and any OIDC provider.

The same platform, from your seat.

Evaluating? See it on your data · trust centre · architecture · your industry · the security questionnaire, pre-filled.

Our platform

One policy for every model and every agent.

Bolt governs how your people and agents work. Aeira governs which knowledge they may reach. One policy, applied at your boundary, for every model and every agent.

Governed Agentic Platform

Deploys inside your firewall, governed and auditable on day one. Every employee gets an AI agent that connects to your enterprise systems over open MCP and surfaces what to do next.

Inside your perimeter: on-prem, VPC, or air-gapped; PII masked at the LLM boundary; nothing for an edge AI gateway to inspect
BYO LLM · BYOK: zero token markup; swap models without changing compliance posture
The One Thing™: patent-pending priority engine surfaces actionable signal from noise across systems
Open MCP integrations: M365, Google, Slack, Jira, Salesforce, GitHub, and a growing roster

Explore Bolt

Enterprise Search

The self-hosted data plane for teams whose ACL, data-residency and audit-trail requirements leave no room to compromise. Built for legal, healthcare, financial services and defense. Start free with Catalog; scale to Dynamic, Enhanced or Federated.

Identity-bound access: every query filtered to what the calling user is entitled to see
Provable erasure: per-person deletion receipts for GDPR / HIPAA requests; per-tenant crypto-shred
Air-gap-ready: AWS, Azure, GCP, on-prem, or fully air-gapped
Audit-trail responses: every result carries the why-filtered context regulators ask for

Explore Aeira

What that means in practice

Empower. Govern. Audit.

Finds, decodes and acts. Saves tokens, protects privacy, reduces breach exposure and shadow AI. When configured, Bolt also works in your browser and terminal: paste into an AI site or pipe to a coding agent, and it masks sensitive data at your boundary. For businesses it is your own vendor-neutral governance, AI-DLP and audit stack inside your perimeter.

Private recall: signal, not screen recording Agent Gateway: mask secrets before they leave Works offline: one app replaces ~20 tools

How Sparcle sits in your stack

Visibility is not control.

Watching AI traffic tells you what already left. Sparcle applies your policy before it does, and runs alongside the identity, search and edge security you already have.

Layer in your stack

What that layer does

Where Sparcle sits

Public AI assistants Assistants run by an AI provider

Run in the vendor's cloud, on the vendor's models. Productive, but the corporate prompt and the retrieved context live on infrastructure you don't control.

Sparcle runs in yours. Same daily productivity surface, your perimeter and your choice of LLM. Switch the model later without re-running compliance.

Enterprise search Cloud-hosted search tools

Indexes corporate content centrally so employees can find what they need across SaaS tools.

Aeira's index is ACL-bound and self-hosted. Identity travels with the query, so every result is already scoped to what the calling user is entitled to see.

Edge AI inspection Inline AI gateways and SSE proxies

Decrypt outbound prompts at the network edge to catch what employees send to public LLMs.

Sparcle can run the model inside your perimeter, so there is no outbound prompt for the edge to inspect. The boundary is identity, not the wire.

AI recall and memory Screen-recording memory tools

Record the screen into a personal, searchable index so you can go back to what you saw, often synced to a vendor cloud.

Bolt builds recall from on-device signals, not a screen recorder: distilled, encrypted, never uploaded, and masked at the AI boundary. Recall →

Third-party AI agents Coding agents and agent CLIs

Give engineers real leverage, but send prompts, secrets, and code to a vendor cloud your security team cannot see into.

Bolt's Agent Gateway masks secrets on the device before an agent's traffic leaves, then restores them locally. Client-side, not a network appliance. Agent Gateway →

Sparcle is the AI runtime. Your identity stack, enterprise search, and edge security keep doing what they already do well. How the model stays in your perimeter →

Works with what you already run

Your identity. Your SIEM. Your model.

Open protocols and your existing systems, not a parallel stack. Nothing here asks you to replace a tool you already trust.

Identity

Your directory, your sign-in

Single sign-on over OIDC, so people reach Bolt with the identity they already have. Access follows the permissions your directory already enforces.

Detection and audit

Your SIEM, not ours

Every audit event is emitted as an OCSF finding and streamed to Splunk, Microsoft Sentinel, syslog-ng or any webhook endpoint. in organization deployments the audit chain is sealed (Bolt and Aeira) and you can verify it offline with a standalone verifier.

Models and agents

Your LLM, open protocols

Bring your own model, or none. Point existing tools at the OpenAI-compatible endpoint and they inherit your masking, policy and audit. Speaks MCP and ACP and publishes a signed A2A agent card, so agents are not locked to one vendor.

Bolt serves every role: engineers, sales, CFO, CIO, DPO and more. Pick the seat you sit in.

Built for every role

Bolt is for everyone

From the boardroom to the keyboard. Open the deck for your role, full screen, with Esc to come back.

Overview · All roles One surface for everything Open deck → Governance · Sovereignty Control it, see it, prove it Open deck → Decision Makers · Board The exposure you already have, closed Open deck → CISO · Security No prompt leaves the building Open deck → CIO · IT Nine tools, one surface Open deck → CFO · Finance Cut the AI bill Open deck → Compliance · DPO GDPR by architecture Open deck → General Counsel AI without waiving privilege Open deck → CHRO · People AI on HR data that HR can defend Open deck → VP Sales · CRO Deals move, the CRM stays put Open deck → Platform · Integrations Connect anything Open deck → Developer One keystroke, 20 tabs closed Open deck → Product Manager Tickets, docs, one box Open deck → Finance · Ops Catch the typo before the wire Open deck → Security · SOC Triage in a keystroke Open deck → Account Executive Spend the call closing, not typing Open deck → Support · CS Answer from one box, not ten tabs Open deck → Everyday Cut the busywork out of your day Open deck → Overview · All roles One surface for everything Open deck → Governance · Sovereignty Control it, see it, prove it Open deck → Decision Makers · Board The exposure you already have, closed Open deck → CISO · Security No prompt leaves the building Open deck → CIO · IT Nine tools, one surface Open deck → CFO · Finance Cut the AI bill Open deck → Compliance · DPO GDPR by architecture Open deck → General Counsel AI without waiving privilege Open deck → CHRO · People AI on HR data that HR can defend Open deck → VP Sales · CRO Deals move, the CRM stays put Open deck → Platform · Integrations Connect anything Open deck → Developer One keystroke, 20 tabs closed Open deck → Product Manager Tickets, docs, one box Open deck → Finance · Ops Catch the typo before the wire Open deck → Security · SOC Triage in a keystroke Open deck → Account Executive Spend the call closing, not typing Open deck → Support · CS Answer from one box, not ten tabs Open deck → Everyday Cut the busywork out of your day Open deck →

Why Sparcle

Four principles, each tied to something that ships.

You should not have to trade control for AI. Sparcle is built so your compliance team can verify the answer instead of taking our word for it.

Control

Stays with you

Policy and masking apply before anything reaches a model.

Authorize

First

Aeira checks permission before content enters retrieval, where implemented.

Your model

Your deployment

Choose the models and endpoints. Local-first where you configure it.

Fail closed

Never unmasked

When the safety floor cannot be confirmed, the agent connection refuses.

Our Mission & Story Every objection, answered

Answers

Heard Bolt is “just an enterprise server”? It runs on your laptop, offline.

One governed app replaces roughly two dozen point tools: clipboard manager, notes and annotation, screenshot-OCR and local file search, 80+ instant utilities, a password vault, secure file sharing on your own storage, a governed terminal, enterprise search, and a cross-system agent. It is a daily driver before it is a deployment, works offline with content encrypted at rest (titles, short facts, names, dates, file paths and URLs stay readable so search works), and has no lock-in: swap the model, the backend, the agent, or your entire SaaS suite, and the same masking, approvals, and audit stay in place. Copilot is welded to Microsoft and Gemini to Google; Bolt sits above whatever suite you run. Almost anything else plugs in with a few lines of YAML.

Replaces ~20 tools Works offline Secure sharing No lock-in Healthcare, finance, defense packs Bring anything (YAML) When Bolt is not the fit

See everything Bolt actually does

Pre-launch by design

No customer logos here, by design.

Healthcare

Defense

Financial

Federal

Legal

Sparcle is built for environments where vendor reference is often contractually forbidden. We are not collecting logos. We are choosing partners. The first 50 founding customers get founder-led integration, 25% off list locked for 24 months, direct roadmap influence, and a contract structured for your security posture, not ours.
Apply for Founding Customer status →

Founding Customers Program

First 50 customers: 25% off, locked for 24 months

We're building Bolt and Aeira with a small group of founding customers who get direct access to the founding team, influence on the roadmap, and pricing locked at 25% below published rates for 24 months. Open through end of 2026 or until 50 customers are signed, whichever comes first.

Apply for Founding Customer status →

25% off any Bolt or Aeira tier (24-month price lock)
Direct founder access · weekly office hours
Roadmap influence · priority on feature requests
Optional co-marketing (case study, joint announcement)
Locked grandfather pricing as you grow into bigger tiers

Sources

Check it yourself.

1. Cyberhaven, 2026 AI Adoption & Risk Report, 5 February 2026 (vendor telemetry, not an independent survey).

2. IBM, Cost of a Data Breach Report 2026 (published 29 July 2026): global average USD 4.99 million, up 12%; and IBM X-Force analysis: of organizations reporting an AI-related breach, 92% lacked proper AI access controls; 40% of organizations use access controls on AI models and data.

5. Proofpoint, 2026 Voice of the CISO: 1,600 CISOs in 16 markets; 78% say GenAI is a security risk, 85% prioritize safe AI use.

6. AvePoint (research by Osterman), The State of AI 2026: 750 respondents; 86.9% delayed generative AI rollouts over data security and data management issues.

3. GDPR Article 83(5): fines up to EUR 20,000,000 or, for an undertaking, up to 4% of total worldwide annual turnover of the preceding financial year, whichever is higher.

4. The Register, 2 May 2023, reporting Samsung's generative AI restriction (reported, not confirmed by Samsung).

Sparcle, Where the model runs · Verify it yourself · Agent Gateway · Architecture · SSO and SCIM.

AI sovereignty starts at your boundary.

Waiting does not shrink the exposure. Download it today and run the full platform on your own machine, no account and no call. When you are ready to put it in front of a team, Discovery Pilot is 30 days and up to 10 seats with no server to install, and Pilot is 90 days and up to 30 seats deployed in your own infrastructure.

Download Bolt free Book a technical deep dive

A deep dive covers the parts you cannot evaluate alone: your identity provider, your SIEM, your policy packs, an air-gapped install, and scoping a pilot.
What a pilot takes · Trust centre · Strategic Vision · Research & Whitepaper

Sensitive and regulated data is flowing into AI. Can you prove where it went?