Skip to content
Bandicot
  1. Home
  2. Use cases
  3. Teams that must explain where their data goes
Log inDocsStart free

When the work should stay on your machine

Know where every prompt went.

Run small local models on your Mac for private work, choose a hosted provider per project when you mean to, and keep every agent action behind approval.

Start freeSee local models

Solo is free for one profile · providers bill you directly

Sign up·Log in·Pricing

  1. 01

    Free core first

    The open Bandicot layer is useful before a model catalog or team layer is complete.

  2. 02

    Local route is explicit

    A local endpoint can keep prompts near the machine. A remote provider receives the prompts sent to it.

  3. 03

    Effects meet the gate

    Projects, sessions, plans, and approvals make the boundary legible before a write lands.

The problem

A privacy label is not a routing policy. If a tool cannot show where a prompt goes, nobody can sign off on it.

The promise

Local models stay on the Mac. Remote providers are named per project. Nothing is called private that is not.

The picture

AI on your own Mac, with a boundary you can explain to a client or an auditor.

Why it holds
Local models run on your Mac; remote providers are chosen per project and named.
How soon
Install a small local model in one click.
What it saves you
No separate policy document guessing where prompts went.

The plan

What does the work, and what is still being built.

Every card names its status. Available now means you can use it today; in development and direction mean it is not shipped yet.

Free Bandicot core

Available now

Solo is free with every capability for one profile. Bring a provider key, a local model, or both; a provider's own bill stays yours.

Paid plans add profiles to an account. Bandicot does not resell model tokens.

A trusted harness around the model

Available now

Bandicot gives every agent a project, tools, a session that survives restarts, approvals, and a clear place to stop.

The native host owns execution facts. The model proposes work; it does not certify a write, spend, or success.

Projects that hold the work

Available now

Keep files, context, plans, and decisions with the project instead of losing them in a disposable chat.

A session is anchored to a project boundary so a pivot starts from an intentional context, not accidental history.

Durable work sessions

Available now

Close a client or reconnect after a pause without turning the work into a brand-new conversation.

The host records session state and clients reattach to it. A browser view does not become the source of truth.

A human gate for writes

Available now

When work can change files or systems, Bandicot makes the decision visible before the effect lands.

The approval boundary fails closed when an action is not allowed. The model cannot grant itself permission.

Local choice, explicit routing

Available now

Choose local hardware when the work should stay home, or a remote provider when you intentionally accept that route.

Local endpoints keep prompts on the configured machine. Remote providers receive the prompts sent to them; routing is never described as magically private.

Local models without a network

Available now

Once a local model is downloaded, chatting with it needs no connection.

Small local models run through llama.cpp on your Mac. Hosted providers still need the network.

Choose the model that fits

Available now

Use a local endpoint, a private runtime, or a remote provider without rebuilding the project around one model lab.

Provider adapters keep model choice separate from project state. Remote providers receive the prompts sent to them.

Hardware-aware model fit

Available now

Before a local model downloads, Bandicot checks it against your Mac's GPU memory budget and free disk.

The fit check reads the Metal working-set budget, not physical RAM, and counts weights, context cache and a stated reserve.

One-click local installs

Available now

Pick a small local model from a pinned catalog and install it in one click, checksum verified.

Eight chat models from about 1.25 to 4 GB of memory, on Apple Silicon. Small models suit private, light work; they are not frontier models.

Recorded versions of the work

Available now

Keep a legible trail of the turn and its effects so a pivot can be reviewed instead of guessed at.

The host treats state changes as recorded events. Reverting is itself part of the history.

For you if

Teams who must say where a prompt went.

Not for you if

Teams fine with cloud-only AI.

The offer

Boundary Review

Business · $49.99 a month · up to 25 profiles

  • Local models from a pinned catalog
  • A provider chosen per project
  • Approval before writes
  • Up to 25 profiles

No contract. Cancel any time from your account and keep the plan until the end of the period you paid for.

Start freeSee local models

Solo is free for one profile · providers bill you directly

Sign up·Log in·Pricing

Left off this page

Focus is a feature.

Bandicot does these too, but they are not why this page exists. Anything marked in development or direction is not shipped yet.

  • Teams across machines
  • Shared compute, intentionally routed
  • Separate threads for a pivot
  • Limits around agent work

Questions

Questions before you start

Does Bandicot send prompts to the cloud?+

Only to the providers you connect. A local model keeps prompts on your Mac; a remote provider receives the prompts sent to it.

Which local models can I run?+

A pinned catalog of 8 small chat models, from Gemma 3 270M to SmolLM3 3B, each checked against your Mac's GPU memory before download. They suit private, light work, not frontier tasks.

Do you hold compliance certifications?+

No external certification is claimed. Read the privacy and security docs for the actual boundaries.

Boundary Review

Local models stay on the Mac. Remote providers are named per project. Nothing is called private that is not.

Start freeSee local models

Solo is free for one profile · providers bill you directly

Sign up·Log in·Pricing

Know where every prompt went.: Bandicot for Privacy-bound teams in legal, health and finance.
Know where every prompt went.. Every claim on this page names its status.
HomeSign upLog inPricingDocs

Explore another angle

One workspace, other ways in.

  • Agents for every team, one price per seat.: Bandicot for IT and security leads at organisations past 25 seats/l/enterpriseAgents for every team, one price per seat.IT and security buyers evaluating agent work at scale
  • Agent work, native on your Mac.: Bandicot for Mac-native users/l/macosAgent work, native on your Mac.Mac users who want a native app, not a browser tab
  • One client per profile. Nothing leaks across.: Bandicot for Digital and dev agencies with several active clients/l/agenciesOne client per profile. Nothing leaks across.Agencies running agent work for many clients

Solo is free for one profile · providers bill you directly

Start free

Ask it anything.
Then hand it the work.

Solo is free for one person. Every plan has every capability, and your model provider bills you directly.

Download for MacSee plans
how to stop an AI agent from running commands without asking
Bandicot · LearnAn approval gate stops an AI agent before an action with side effects, such as a shell command, a push or a write outside its rules, until a person says yes.Read the full answer →
  • TerminalAgent calls sit on a vertical icon rail8862102a
  • ChatOne auto viewe889d9cd
  • SetupDrop a setup file on the window, type keys at a hidden prompt, and a second user lands on the same setupb3315485
  • PermissionsAuto is the only permission mode, tuned by permissions.json; dock reads Work | Team | Versions and never clips545d855a
  • TeamYour agent reads team channels and drafts posts behind a broker2cffe87c
  • MacsA sleeping Mac's schedules run on your awake Mac that holds the project, handed back on wake3ee6c14d
  • MacsAnswer and start work across your own Macs9cbff698
  • SetupOne portable setup file9cac30cf
  • TeamOffline mailboxc3f84303
  • TeamYour own Macs as one group2d761c37
  • VersionsSync a folder with your team5e88fb2c
  • TeamAcross networkse8d84155
  • TerminalAgent calls sit on a vertical icon rail8862102a
  • ChatOne auto viewe889d9cd
  • SetupDrop a setup file on the window, type keys at a hidden prompt, and a second user lands on the same setupb3315485
  • PermissionsAuto is the only permission mode, tuned by permissions.json; dock reads Work | Team | Versions and never clips545d855a
  • TeamYour agent reads team channels and drafts posts behind a broker2cffe87c
  • MacsA sleeping Mac's schedules run on your awake Mac that holds the project, handed back on wake3ee6c14d
  • MacsAnswer and start work across your own Macs9cbff698
  • SetupOne portable setup file9cac30cf
  • TeamOffline mailboxc3f84303
  • TeamYour own Macs as one group2d761c37
  • VersionsSync a folder with your team5e88fb2c
  • TeamAcross networkse8d84155

Product

  • Work
  • Team
  • Versions
  • Automatons
  • Sub-agents
  • Skills, plugins and MCP

Safety

  • Approvals
  • Undo a run
  • Local models
  • Setup file
  • Security

Use cases

  • Teams
  • Agencies
  • Founders
  • Consultants
  • Token costs
  • Cursor users
  • ChatGPT users
  • All use cases →

Learn

  • Approval gate
  • Undo an agent run
  • Tokens per solved task
  • Frozen prompt prefix
  • Sub-agents
  • Automatons
  • Setup file
  • Every answer →

Resources

  • Get started
  • Changelog
  • Connect a model
  • FAQ
  • llms.txt
  • Knowledge gallery

Company

  • Pricing
  • Mission
  • Terms
  • Privacy
  • Cookies
bandicotbandicot
© 2026 BandicotLast change shipped Oct 18, 2026 · 8862102ahi@apparatdynamics.comllms.txtSitemap