Tessera.
Use cloud AI while sharing less sensitive information.
Prepare client messages, business drafts and other prompts on your Mac. Replace the names, identifiers and confidential details you choose with placeholders, review the exact outgoing request, then restore recognized placeholders in the reply locally.
Coming soon · not yet on sale · planned price $19.99 USD, paid once · no subscription
Apple silicon · macOS 14 or later · provider charges are separate
Choose what to hide before you send.
Scan locally with pattern checks and Apple's language analysis, plus an optional on-device model. Review suggested replacements and add anything missed before approving the request.
A second check before each cloud request.
Tessera checks the request body against registered values, token rules and detectable identifier patterns. Explicit ‘Send as is’ choices permit selected disclosures. These checks do not guarantee anonymity.
The reply comes back with your real values, on your Mac only.
Placeholders that come back exactly as Tessera issued them are restored to your real values as the reply streams in. A placeholder the model changes or leaves out is not restored, so compare the wire view with the restored reply before you rely on it.
Looks for credentials, Social Security numbers, card numbers, IBANs, email addresses, phone numbers, names, organizations and addresses on your Mac, plus any value you mark as always protected: checksummed patterns, Apple's language analysis, and an optional consent-gated on-device model. Detection can miss things, so you can add anything it did not mark.
Replaces each approved value with a tag such as [[TSR:PERSON_0001]], or with a shape: an invented value of the same kind in a fixed form no real value uses, so the model can still reason about a card number, Social Security number, email or IP address. The same value keeps the same placeholder across a session.
Before a cloud request starts, Tessera checks its body for known sensitive values, supported variants and identifier patterns. Selected ‘Send as is’ disclosures are allowed. Review the full request for anything detection missed.
Send with your own provider API key and the reply streams back and is restored on your Mac. No API key? Copy the sanitized prompt into a chat app, paste the reply back, and Tessera restores it the same way.
Select text in another app and choose Review with Tessera from its Services menu, or copy it and choose Prompt › Review Clipboard. Tessera takes text only when you ask.
What can leave your Mac, and where it goes.
Detection can miss sensitive information, and placeholders do not hide everything the surrounding context may reveal. Read every wire preview before you send it.
Only when you send with your own API key: the request shown in the wire preview, including the sanitized earlier turns of the session and any value you chose to send as is. The provider handles it under its own policies.
Only if you choose the optional on-device model: the 3.58 GB download, after you review its size, licence and storage location.
macOS may contact Apple to verify your purchase and to update the app.
Nothing from the app. Silo Systems operates no prompt-processing server and receives no prompts, replies or API keys from Tessera.
Firms: once Tessera is on the Mac App Store, buy seats in Apple Business Manager › Apps and Books at the App Store price; licences are user-assigned.