Privacy
What happens at home,
stays at home.
Privacy isn't a setting in Sanctum. It's the architecture. Here is exactly what that means.
Your data never leaves the house
Voice, commands, routines and device states are processed and stored on the hub. There is no outbound connection to send them anywhere.
No account required
No sign-up, no email, no phone number. Sanctum doesn't know who you are, and doesn't need to.
An open-source model
The AI is open source, so anyone can inspect what it does. No hidden behaviour, no secret training on your conversations.
Zero telemetry
No usage analytics, crash reports or 'improvement programs'. We can't see how you use Sanctum — by design.
You hold the off switch
Every room node has a physical microphone mute. When it's off, it's off at the hardware level.
Nothing to subpoena
We hold no recordings or logs of your home. There is nothing for us to hand over, sell or lose.
First production run · Limited