Today Pax runs in our cloud under the scopes you grant, with everything logged and reversible. We are building toward handling the identifying details of your communication on hardware you already own, so only what needs reasoning ever leaves your device. That work runs in engineering now and is not shipped.