Privacy with AI: Client Names Stay on Your Mac

An AI agent is only as helpful as the data it may read. And everything it reads, it sends to its provider's servers: client names, addresses, bank details. For invoicing data that is a fundamental problem, whether the agent comes from Anthropic, OpenAI, Google or Mistral.

That is why GrandTotal gives the AI no names. You ask “What does Müller owe us?”. The AI provider receives “What does ⟦W-7F3A0⟧ owe us?”. You still see the answer with the real name, because GrandTotal puts it back in on your Mac.

Recent
Open5
Due1
Overdue2
Documents
Invoices
Estimates
Credit Notes
10104,320.00
Acme Ltd03/09/2026
10091,575.00
Atelier Sonnenberg14/08/2026
10083,204.00
Müller & Söhne AG29/06/2026
1007760.00
Example Inc.16/06/2026
1006980.00
Studio Lindner02/06/2026
10052,150.00
Acme Ltd20/05/2026
Ask GrandTotal
Ask GrandTotal…

How It Works

In Ask GrandTotal, GrandTotal replaces names, addresses, email addresses, phone numbers, IBANs and web addresses with placeholders before anything leaves the Mac. The same client keeps the same placeholder throughout the conversation. So the AI can compare, count and ask follow-up questions without ever knowing a name. Amounts, dates and document numbers stay readable. The mapping to the real names lives only in GrandTotal's memory on your Mac and disappears with the conversation.

For other AI programs, the Redact info option shortens every word to its first and last letter: “Erika Musterfrau” becomes “E*a M*u”. There you read the AI's answer directly, and nobody puts the names back in.

In Ask GrandTotal, this also applies to your question. GrandTotal recognizes names in it even with typos, spelled differently or in lowercase, such as “Müler”, “Mueller” or Mayer instead of Meier. When the AI searches, creates or exports something, GrandTotal puts the real values in. The spreadsheet in the Exports folder therefore contains the correct names.

One question to the AI: what reaches the AI provider With Ask GrandTotal. The user asks “What does Müller owe us?”. Ask GrandTotal turns it into “What does ⟦W-7F3A0⟧ owe us?”, and only that reaches the AI provider. The AI asks for the invoices for ⟦W-7F3A0⟧; Ask GrandTotal translates this back into Müller for GrandTotal. Ask GrandTotal sends the client with name and address up as placeholders, with 3,204.00 outstanding. The answer “⟦W-7F3A0⟧ owes 3,204.00” comes back through Ask GrandTotal and reaches the user as “Müller & Söhne owes 3,204.00”. AI provider User Ask GrandTotal GrandTotal placeholders only What does Müllerowe us? What does ⟦W-7F3A0⟧owe us? Invoices for⟦W-7F3A0⟧ Invoices forMüller Müller & SöhneLeopoldstr. 88, München3,204.00 outstanding ⟦W-7F3A0⟧⟦W-2A96D⟧ ⟦W-E7223⟧3,204.00 outstanding ⟦W-7F3A0⟧owes 3,204.00 Müller & Söhneowes 3,204.00 GrandTotal Name from your question shortened What does Müllerowe us? Find client“Müller” M*r & S*eL*r. 88, M*n3,204.00 outstanding M*r & S*eowes 3,204.00 GrandTotal all readable What does Müllerowe us? Find client“Müller” Müller & SöhneLeopoldstr. 88, München3,204.00 outstanding Müller & Söhneowes 3,204.00
The AI sees only placeholders, you see the real names.

See for Yourself

The eye in the Ask GrandTotal window switches to what actually went to the AI: your question, the AI's queries and its answer, each with placeholders. A whole document as the AI receives it is shown by Show as Ask GrandTotal sees it in the context menu.

Ask GrandTotal always pseudonymizes. For other AI programs, you find the option under Settings › MCP Server. The question mark next to it shows how a client reaches the AI.

What It Cannot Do

GrandTotal replaces names from your client data everywhere. Other names in notes, item texts, files or your question are recognized by the macOS language analysis, and it sometimes misses one. You can check this at any time, as described above under “See for Yourself”. Amounts, places and dates may in some cases point to a client.

With other AI programs connected through the MCP Server, the option protects everything GrandTotal delivers. What you type there yourself goes straight to the provider. So that the program still finds the client you named, GrandTotal looks up the name on the Mac and answers only with the internal number and the shortened name.

At a Glance

Placeholders instead of names

Names, addresses, IBAN, email, phone, web

Real names only on the Mac

In your question, too

Verifiable

The eye shows what went to the AI