Use AI on confidential material, without handing it over
A good deck needs real context: revenue, client names, salaries, plans. Today, getting that deck from an AI means pasting all of it into a chat, where it leaves your control. Many company policies don't allow that, so people either bend the rule or do without the AI.
OpenGamma separates the design from the data. The AI gets placeholders and designs the deck. Your browser puts the real data back. You get a finished deck built on your real data, and the AI never saw it.
Your browser
Reads your document
Encrypts it with your key
Shows you what the AI will see
Fills the real values back in and writes the .pptx
encrypted →
OpenGamma
Stores ciphertext it can't read
Stores the placeholder version you approved
Renders the deck design
placeholders →
Your AI app
Sees [CLIENT_1] grew [PCT_1]
Writes the story and picks the layouts
Never sees the real values
Masked mode
The AI reads your text with names, companies, amounts, dates, percentages, emails, codes and your own terms swapped for tokens. Best when the wording matters.
Blind mode
The AI sees only structure: how long each block is, table shapes, column types and trends. Best for the most sensitive material.
Same output
Placeholders are sized like the real content, so the deck the AI designs fits once your values go back in.
The technical detail
What happens where
In your browser: documents are parsed into blocks, you review them, and they are encrypted with AES-256-GCM before upload.
Your vault key is random. It is stored on our server only in wrapped form: once encrypted with a key derived from your passphrase (PBKDF2-SHA256, 600,000 rounds) and once with a recovery key you download at setup.
The manifest is what the AI may see. You review it before anything is uploaded. Blind mode: block ids, lengths, table shapes, column types and trends. Masked mode: text with names, companies, amounts, dates, percentages, emails, codes and your custom terms replaced by tokens.
The AI designs against placeholders and references blocks by id. Our server renders a skeleton deck with filler text.
Fill and export run in your browser on our domain, never inside a chat window. Your passphrase unlocks the key locally, the real content is placed, and the .pptx is written on your machine.
What we store
Ciphertext, wrapped keys, manifests you approved, and skeleton decks. Never your passphrase, your recovery key, the vault key, or plaintext. Our automated test suite checks the database, file storage, logs and every AI tool response for planted secret values on every release.
Limits you should know
Lose both your passphrase and your recovery key, and the data cannot be recovered by anyone.
Masked mode shares the meaning of your text minus identifying details. Use Blind mode when even that is too much.
Masking is automatic and errs toward hiding more. Always check the review screen before approving.
Content you paste into a chat directly is outside the vault. Use the vault instead.
We will commission an independent review before describing the vault as "zero-knowledge".