CLK
To Amelia Sørensen Mara Lindqvist 12 Klara Norra, Oslo 4 Estgate Row, Haldon ref. 48831-B ref. 20714-Q
Content-blind email assistant Write the email.
Write the email.
Keep the names.
Paste an email you received, or just say what you want to say. cloak-post drafts, replies, rewrites and summarizes it — but every recipient, address, phone and account number is swapped for a realistic stand-in on your device before a single word reaches the AI. The model writes to the stand-in; cloak-post reseals the letter with your real values. The gateway never learns who it's for.
- 0 raw-PII bytes posted
- 4 ways to write
- Signed on-device receipt
cloak-post never sends your mail. It hands you the finished draft to send yourself.
Answer an email you received.
No personal data detected — nothing to seal.
Egress monitor 0 raw-PII bytes
- On-device
- 0
- Gateway relay
- 0surrogates
- Third-party
- 0
Your finished email will appear here.
Seal first — cloak-post drafts from surrogates, then reseals with your real names.
The delivery, in three moves
Seal, on-device
A WebAssembly engine plus a multilingual name model find every name, email, phone, address, card and reference number — across Latin, Cyrillic, Arabic, Devanagari and CJK — and frank each with a realistic surrogate. Zero network.
Relay surrogates only
Only the surrogate-bearing text is sent to the drafting model, through the CloakAPI gateway with a cryptographic pre-tokenisation proof. The real values — and the map back — stay in the tab.
Reseal & copy
The draft returns carrying the same surrogates; cloak-post maps them back to your real values on-device, signs a receipt attesting 0 raw-PII ever left, and hands you the email to copy and send. It never sends the mail for you.