The matter travels with you.
So does the boundary.
A partner-first assistant for iPad and iPhone: the read-only sibling of the Akshāyvāt assistant on the desktop. Fast, private, and locked to the firm boundary. Drafting stays at the desk. The record comes with you.
A conversation, inside the boundary.
The privilege banner at the top of the screen says where this conversation runs. It is always there. It never scrolls away.
The interesting inversion: iPad first.
Apple's on-device intelligence asks for recent silicon: A17 Pro or newer on iPhone, which means the iPhone 15 Pro and later. Most partners at a working firm carry an iPhone 14 or older, and those phones get none of the on-device tiers. But every partner already carries at least an M1 iPad Pro. On iPad, the fully private path is universal across the partnership. On iPhone, the firm's own gateway is the common path.
The iPad is also the right instrument for the work itself: a proper reading surface for the record, in chambers and in court, which a phone does badly and a web app cannot reach offline. So the product goes where the silicon and the work already are, and the phone follows.
Two doors, both of them the firm's.
Read and review is a design commitment, not a limitation to apologise for. Drafting, approving and signing stay on the desktop.
The Akshāyvāt read API
Matters, documents, artifacts and briefs, at the partner's own access level. The same spine the desktop reads. Read only.
Microsoft 365 Graph
Documents, mail and calendar through the firm's own tenant, on read scopes alone. The estate the firm already trusts.
It signs in as you
Entra ID. Every read is the partner's own permission, never an elevated service account. What you cannot see at the desk, you cannot see in hand.
And nothing else
No open web. No writes. The assistant can reach exactly two endpoint classes, both firm-controlled, and the sandbox will not open a third.
One seam, four engines behind it.
The app speaks a single protocol and never sees which engine answered.
Apple's built-in model
Sealed in the silicon. Works offline, costs nothing to run, and nothing leaves the hardware.
A model the firm owns
A custom model running on the same silicon: the proof that the swap is real, not a promise in a slide.
Private Cloud Compute
Apple's sealed compute for the heavier lifts, when the on-device model is not enough and the partner allows it.
The firm's egress gateway
For older phones, and for when the firm wants in-tenant control instead of anyone's cloud.
The banner never leaves the screen.
A partner should never have to wonder where a sentence went. So the mode is always in view, above every conversation.
On device. Nothing leaves the hardware. The default wherever the silicon allows it.
The firm's own tenant. Inside the Microsoft 365 wall, on the firm's gateway, under the firm's audit.
Redacted before anything external sees a word. Names and particulars stripped at the boundary.
Airplane mode is the demo.
A bundled, non-privileged library of firm knowledge rides with the app: precedents, playbooks, procedure. Retrieval runs through Apple's own on-device search, and every answer carries its citation as a file path. No vector database, no network, no signal required. It answers in the corridor outside the courtroom, where the network is not.
Three questions we have not answered yet.
Use at the bar table
What real use looks like in court: glanceable, silent, one-handed. We will learn this by carrying it, not by guessing.
The phone tier
When the iPhone path is worth building past a companion. Only once the iPad has earned its place in the working day.
Remote wipe
The offline cache is encrypted at rest, but a lost device must be revocable. Wipe semantics are being designed, not bolted on.
The first flight is a short one.
Akshāyvāt Mobile is in build. Its first reach is a TestFlight to the firm's partners, and a wider circle follows only when the boundary has proved itself. Leave your details and we will tell you when it reaches yours.