A vault is the encrypted workspace of a single client. Everything about that client lives there: conversations, attached files, custom dictionary, audit log and the token mapping table.

Create the vault

  1. In the sidebar, choose the vault creation action.
  2. Give it a name, normally the client’s (for example “Client Alpha”).
  3. Pick a colour: it identifies the vault at a glance everywhere in the app.

That is it. The vault is created, encrypted, and ready for your first conversation.

What happens under the hood

  • Each vault is a separate encrypted database, with its own key derived from a master key kept in your system’s secure keychain (the macOS Keychain, for instance). No key is ever written to disk.
  • The vault’s name and colour also live inside the encrypted database: there is no clear-text registry of your clients on the machine.
  • Vaults are isolated from one another: nothing can read two vaults in the same operation, and a token created in one vault cannot be found in any other. Details in Why one vault per client.

Good habits

  • One vault per client, no exceptions. It is the confidentiality boundary of the whole system.
  • Early on, add this client’s proper names to the vault dictionary: company name, project names, key people. Masking then becomes deterministic, never a probability again.
  • The colour is not decorative: when you juggle several clients, it keeps you from writing in the wrong vault.

Next step

Your first conversation with AI: write, analyze, review, send.