Sovrana
An employee-controlled local reflection companion with clear nonclinical limits, optional user-chosen model access, private storage, crisis boundaries, portable deletion, and employer reporting restricted to benefit availability and thresholded aggregates.
A confirmed open-source local reflection app provides on-device storage and user-supplied model access, while no employer fleet and licensing layer was found. The architecture reduces centralized content collection, but it does not guarantee zero egress: using a remote model sends content to that provider, and operating systems, backups, crash tools, device management, or employer-funded credentials can expose metadata.
Sovrana should be voluntarily installed and controlled by the employee, with local-only mode, clear provider disclosure, no employer administrator access to content, prompts, topics, mood, risk, or individual activity. A per-seat usage receipt can itself become sensitive workplace surveillance. Employers should receive contract, availability, deployment, support, and only thresholded aggregate activation or usage where lawful, necessary, clearly disclosed, and unable to identify a person.
The product is not therapy, clinical care, diagnosis, crisis detection, employee assistance, or an employment tool. It must not present cognitive techniques as treatment, infer mental state, score risk, contact the employer, or allow content or usage to affect performance, benefits, discipline, promotion, accommodation, or termination.
Employers funding an optional wellbeing benefit and employees who independently choose whether and how to use a local reflection tool.
A current local open-source release creates an enabling window.
Local software scales, while safety and device support add cost.
One cross-reference and two inbound connections provide moderate support.
A confirmed local foundation, clear employer-benefit buyer, and unoccupied fleet layer support a privacy-focused test.
Mental-health safety is high risk, remote keys still create egress, per-person receipts are unsafe, one interface is unverified, and employer willingness to fund a minimally observable benefit is unknown.
Discussion
No comments yet — be the first to weigh in.