Privacy with AI: Client Names Stay on Your Mac
Everything an AI agent reads ends up with the provider of its model: client names, addresses, bank details. For invoicing data that is a problem, whichever model you choose.
That is why GrandTotal gives the AI no names. You ask “What does Müller owe us?”, the provider receives “What does ⟦W-7F3A0⟧ owe us?”. You see the answer with the real name.
How It Works
Ask GrandTotal replaces names, addresses, email, phone, IBAN and web addresses with placeholders before anything leaves the Mac, including in your question. Amounts, dates and document numbers stay readable. Only GrandTotal on your Mac knows the mapping. Answers, spreadsheets and reports show the real names again.
The MCP server uses shortened names because you read the answer directly in the AI program: “⟦W-7F3A0⟧ owes 3,204.00” would mean nothing to you, “M*r & S*e owes 3,204.00” does. “Erika Musterfrau” becomes “E*a M*u”.
See for Yourself
The eye in Ask GrandTotal shows what went to the AI. In a document's context menu, Show as Ask GrandTotal sees it shows the whole document.
For the MCP server, the question mark next to the option shows how a client arrives.
Risks
GrandTotal always replaces names and places from your client data. In items, notes and other free text, the macOS language analysis is used to detect names and places. It does not detect 100% of the values.
At a Glance
Placeholders instead of names
Names, addresses, IBAN, email, phone, web
Real names only on the Mac
In your question, too
Verifiable
The eye shows what went to the AI
GrandTotal swaps the placeholders in and out on your Mac; the AI sees structure and amounts, not your customers.