Only assigned sources.
A person assigned to one set of client folders cannot use RPlay to read another set. Changing the AI app does not widen that access.
Security and privacy.
Your team can ask.
Access still has limits.
Employees sign in with their work account. RPlay limits each answer to their assigned sources. Its own chat runs AI on the Mac Studio in your office.
Signing in.
The work account your team knows.
RPlay uses your company’s Microsoft Entra ID. For a business using Microsoft 365, this is the Microsoft service behind employees’ work accounts. It confirms who is signing in. RPlay then checks what that person is allowed to use.
Your work account.The one you use for Microsoft 365.
Who are you?
Company sign-in.Microsoft Entra ID confirms it, with your company’s own rules.
What may you see?
Your assigned sources.RPlay opens only those.
Entra sign-in uses Microsoft’s cloud identity service. Local AI means your questions are processed on the office Mac Studio when you use RPlay chat with local models. It does not mean every part of the setup works without internet access.
Who can see what.
A shared box.
Individual access.
Each mailbox is connected by its user.
Users approve mailbox access through their provider’s consent screen. RPlay does not get administrator access to all company mailboxes.
Source records are read-only.
RPlay reads emails, documents and business records. It only sends when you ask, and only to you. Limited actions, such as saving a draft or a confirmed CRM note, are explicit and logged.
Where the information goes.
Standard stays local.
Deep thinking is a choice.
RPlay chat · Standard.The everyday mode: local AI on the Mac Studio.
Your office.
- Your question
- The search index
- The AI models
- Keys and credentials
- The answer
Outside your office.
Nothing.
Deep thinking, or a cloud AI app.RPlay chat’s Deep thinking mode sends the question to a heavier model through OpenRouter (for example GLM); a cloud AI app such as Claude or ChatGPT is the same kind of choice.
Your office.
- The search index
- The full archive
- Keys and credentials
- The access check: only your sources
Goes to that app’s provider.
- The request
- The passages it needs
- The answer, written there
Looking after the box.
Useful records.
No customer content in monitoring.
Protected connection details.
Source credentials are encrypted on the Mac Studio. They are not written into configuration files or logs.
A record of access and actions.
RPlay records metadata about requests and explicit write actions. Health monitoring reports the condition of the box, not the content of client files.
Backups checked by restoring them.
The rental includes backups tested through restore. Your data, index and keys remain yours.
Remote access is configured deliberately.
In the office, use the company network. Remote access is set up through a customer-controlled connection, with no public incoming port opened on the Mac Studio.
For your IT partner.
Sign-in uses Entra ID. Confirm your company’s sign-in requirements, including any multifactor authentication and access policies, during setup. Your IT partner confirms the policies and settings to use during installation.
Credentials are sealed using AES-GCM. File shares and business APIs use read permissions. Remote access options in the positioning are Tailscale or Cloudflare Tunnel, initiated outbound from the box and configured by the customer.
Microsoft’s explanation of Entra ID.Start with a question from your working day.