Privacy by design: AI in homes done right
If your home is going to listen, it had better listen privately. Here's the architecture.
Most of our estate clients have a baseline assumption: their home is not going to share their conversations with a tech company. This is a sensible default and it's the architecture we design against from the first conversation. Privacy is not a feature we add on; it's a constraint we plan around.
The first principle is on-device first. Voice and vision processing happen locally wherever the hardware allows. A modern home AI hub has enough compute to handle the routine work — recognizing a wake intent, transcribing a request, identifying who's at the door — without leaving the building. We use the cloud only when the request genuinely requires the larger reasoning of a hosted model.
When the cloud is involved, it goes through a private gateway. This is not a marketing phrase — it's a real, technical architecture. The home talks to a private endpoint that we operate or you operate, which talks to the model. Your data is not used to train someone else's general-purpose AI. Your conversations are not retained at the model provider. The audit trail is yours.
What gets recorded, retained, and for how long is your decision. Most of our deployments retain nothing by default for non-event audio and video. The system listens and acts in the moment, without writing anything down. Specific events — security alerts, requested transcripts of voice memos — get retained, but only those, and only with your explicit configuration.
Every action the home took is logged in a private journal you can read. Who arrived. What got armed. What scenes ran. What alerts were sent. This is the audit trail, and it's yours to query, yours to export, yours to delete. It exists on infrastructure you control.
All of this is invisible in daily use. The home behaves like an attentive presence, not like surveillance. The homeowner notices the behavior, not the architecture. Done well, privacy isn't something the homeowner has to think about — it's just how the system is built.