Private & Local-First
Ledgers, contracts and payroll stay on your computer. Only the excerpts a task needs go to your AI provider, with optional identifier masking and a log of every request that leaves the device.
Your back office, done on your own computer. AMBA works on your spreadsheets, invoices and bank statements and hands back verified Excel, Word and PDF files—only the excerpts a task needs go to the AI model you choose.

What stops finance and operations teams from using AI on real work, and how AMBA handles it.
Ledgers, contracts and payroll cannot be uploaded to a public chatbot.
Local-first. Files stay on your computer; only the excerpts a task needs go to your AI provider, with optional identifier masking and a log of every outbound request.
Chat assistants round wrongly, miscount and invent figures across thousands of rows.
Deterministic tools. Totals and matches are computed with SQL and real spreadsheet formulas; key figures name the file, sheet and cell they come from.
Staff send files over chat all day, and every evening someone collects and reconciles them.
Processes on a schedule. AMBA fetches files from Telegram, Google Drive or a folder, reminds whoever is late, has an agent build the report and delivers it on Telegram.
An AI agent can overwrite a source document and leave no record of what changed.
Sources are read-only for agents and kept exactly as sent. Each file keeps a history of which run and model changed it, with revisions to roll back to.
AMBA runs as a native desktop application, with no background servers or local web services.
| Operating System | Architecture | Package & Download |
|---|---|---|
| macOS (12.0+) | Apple Silicon (M1/M2/M3/M4) | ⬇️ Download .dmg (Apple Silicon) |
| macOS (12.0+) | Intel 64-bit (x64) | ⬇️ Download .dmg (Intel x64) |
| Windows (10/11) | 64-bit (x64) | ⬇️ Download .exe (Setup) |
| Windows (Enterprise) | 64-bit (x64) | ⬇️ Download .msi (Enterprise) |
| Linux | 64-bit (x64) | ⬇️ Download .AppImage |
| Linux (Ubuntu/Debian) | 64-bit (x64) | ⬇️ Download .deb |
Every release package is signed, and AMBA verifies the signature before it installs an update. macOS builds are also signed with an Apple Developer ID and notarized.
No. AMBA is local-first: your files, the app database and run history stay on your computer. When a task runs, only the excerpts and tool results it needs are sent, as text, directly to the AI provider you configured with your own key, never to AMBA. You can mask identifiers per project, every outbound request is listed under Data leaving this device, and your documents are not used to train models. See the Privacy Policy and Security & Architecture.
AMBA connects directly to the provider you choose, with your own API key:
Only in your operating system's keychain: macOS Keychain, Windows Credential Manager, or on Linux the Secret Service (GNOME Keyring, KWallet or KeePassXC). AMBA never writes keys in plain text to disk, its database, logs or browser storage, and there is no fallback store. On Linux without a running keyring, saving a key fails with a clear message: install or enable GNOME Keyring or KWallet, then restart AMBA.
Reconciliation, calculations, Excel, Word and PDF output, file management and on-device text recognition run on your computer. Internet access is used only for:
Not at all. AMBA is designed for owners, accountants and operations managers. You work in plain language, drop in spreadsheets and PDFs, and get back Excel workbooks, Word documents and PDF reports. The only setup is an AI provider key, and the setup guide walks you through it.
No. AMBA has no shell runner: agents cannot run terminal or operating system commands, in any project or setting. They work only through AMBA's own file, table and Office tools, each checked by a permission engine and confined to the project folder. See Security & Architecture.