In development · not available yet

Intelligence that asks first.

Your AI agent for the desktop. It acts for you — never without your OK.

Why it’s safe See what it does

01 Identity

More than a presence.

Orbit has a face: a sphere of smoke with two glowing eyes. It floats on your desktop, breathes, blinks — and looks at you. Rendered live, exactly as in the app.

02 Security

Asks before it acts.

Many AI agents act first and explain later. Orbit works the other way round: it shows you what it is about to do — and waits for your yes.

  1. Safe Reading files and the web. Runs without asking.
  2. Confirm Writing, running, opening. A dialog first — every time.
  3. Critical Deleting, sudo, sending data, passwords. Always a warning — never allowed automatically.

  • A second opinion

    Before a risky step, a model from another provider checks if it fits your request.

  • Always a way back

    Clean-ups only go to the Trash. Orbit never empties it.

  • Your keys stay yours

    Encrypted in your system keychain — never in code, logs or the interface.

  • Every step on record

    Each action is logged with time, model and your decision.

  • Four eyes. Before risky steps, models from other providers check whether it fits your request. Critical steps always ask you.
  • Personal details masked. Names, e-mail, phone, IBAN and addresses become placeholders before a request leaves — and come back only on your screen.
  • EU mode. One switch, and only EU-hosted or local models get your text.
  • My data. See and delete everything Orbit stores, category by category.

Encrypted where it matters.

No ZeroIT server, no ZeroIT account: your data never passes through us. Where data has to travel or be stored, Orbit encrypts it with open, well-tested methods.

  • API keys System keychain

    Encrypted by macOS Keychain or Windows DPAPI. Never in code, logs or the interface — the window you type in never sees them again.

  • Phone ↔ computer Ed25519 · Tailscale

    Every request is signed with a device key that can’t be exported, valid once and only for a minute. Reachable only on your computer and inside your own Tailscale network (WireGuard) — never public.

  • Signing in scrypt · TOTP · Passkeys

    Passwords are stored only as a scrypt hash, one-time codes follow RFC 6238, Face ID works via passkeys (WebAuthn). Five wrong tries and sign-in locks, longer each time.

  • Keys to your phone ECDH P-256 · AES-GCM

    Off by default. If you allow it, keys travel end-to-end encrypted with a fresh key exchange each time, bound to exactly that one device.

  • Notifications Web Push · RFC 8291

    Encrypted end to end. Apple and Google deliver them but only ever see scrambled data.

  • Pendant AES-256-GCM

    Its key is set up over a USB cable only. Every message can be used once; forged or replayed ones are dropped.

Built along German and European rules.

Made in Germany, with the GDPR (DSGVO) and the recommendations of Germany’s Federal Office for Information Security (BSI) in mind.

  • Privacy by design (GDPR Art. 25). Only what’s needed leaves your computer; names, e-mail, phone, IBAN and addresses are masked before any cloud request.
  • EU mode. One switch, and only models hosted in the EU or on your own machines get your text.
  • Your rights, built in. “My data” shows everything Orbit stores, category by category, and deletes it for good.
  • BSI-recommended algorithms. AES-GCM, SHA-256, HKDF and ECDH on P-256, as listed in the BSI technical guideline TR-02102.
  • Open standards. RFC 6238 (one-time codes), RFC 8291/8292 (push), W3C WebAuthn (passkeys).
  • This website. No cookies, no tracking, no Google Fonts or other outside servers.

Honestly

Orbit is not certified — no BSI certificate, no external security audit yet. Cloud models from the US or China can’t be made GDPR-proof by Orbit; that’s exactly why there’s an EU mode and local models.

Masking personal details is a pattern filter, not a guarantee: unknown names or text inside images can slip through.

Local is safest.

The most private request is one that never leaves your desk. Much of Orbit runs entirely on your own machines — and you decide what may go to the cloud.

  • Your own AI model. “Orbit local” runs open models through Ollama on your Mac or your own PC at home — reachable from the Mac over your home network or Tailscale. No provider sees these chats.
  • Uncensored mode, local only. Talks only to the local model, without any tools.
  • On-device senses. Text recognition, the screen companion and the “Hey Orbit” wake word run on the device. If your Mac can’t recognise speech offline, Orbit stops instead of sending audio away.
  • A local voice. The natural voice (Piper) speaks on your computer — nothing goes online to read an answer aloud.
  • Everything stays in your folder. Conversations, memory, projects, keys and settings live in Orbit’s data folder on your computer, not in a cloud.
  • Helpers stay home. Small background jobs go to the local model first when it’s fast enough.

03 The orbital space

Many minds.
One orbit.

Orbit isn’t tied to a single AI. Free and local models come first — paid ones only with your own key.

  1. 01

    Route

    A fast free model reads every task in under four seconds and hands it to the provider that fits best.

    classifier · keyword rules as backup

  2. 02

    Fall back

    Rate-limited, overloaded or silent for 15 seconds? Orbit moves the conversation to the next provider.

    HTTP 429 / 503 · 3 min cooldown

  3. 03

    Council

    For decisions that matter, every model answers, then they debate. One speaker writes the shared answer.

    round 1 → round 2 → speaker

  • Orbit local — Ollama on your own machine
  • Groq — free tier
  • Gemini — free tier
  • OpenRouter — free models
  • Claude — with your own key
  • ChatGPT — with your own key
  • Grok — with your own key

04 Features

Real work.
On your computer.

Every scene below is rebuilt from the real app. Nothing on this page talks to an AI — it just shows how Orbit looks and behaves.

Chat that actually does things.

Files, folders, Word documents, commands, the web. Each step shows up as a chip; reading runs freely, writing waits for your OK — and most writes can be undone.

A council, not a single voice.

Several free models answer independently, argue with a written dissent log, and a decider writes the result. Modes: Fast, Deep, Red team, Research with checked sources.

Customer, finance, critic — at one table.

Test a business idea, a life decision or a project with roles you pick. Orbit builds the score table itself, then the two most opposed roles argue.

Shows where every sentence comes from.

After each answer Orbit marks what it calculated, looked up or only knows from the model — checked in code, not by the model. “Is that true?” fact-checks a forwarded claim with real sources and catches invented ones. The sphere even looks unsure when it is.

The whole world on a globe.

~69,000 radio stations and ~9,000 TV channels from almost every country, live headlines from abroad and from inside, a live map of where news is breaking. German live subtitles for foreign broadcasts, “time travel” to the news of any day since 1900 with newsreels, and “Does this affect me?” — matched against your own calendar, places and notes, locally.

Meeting in, tasks out.

Only after everyone agrees. Orbit transcribes, writes summary, decisions and “who does what by when” — and spots promises you make to others.

Photos, files, voice, calls.

Drop in almost any file, point the phone camera at a letter, plant or error, talk hands-free with “Hey Orbit”, or call Orbit in its own window. Faces are never identified.

A companion that reads along — only when asked.

Off by default. Reads the text at your cursor on-device, never password managers, banking or private windows, and offers help in a small bubble. It can insert the answer right where you were.

Uses apps like you do.

Reads buttons and fields as text (fast, cheap), clicks and types, falls back to screenshots and on-device text recognition. Allowed once per task, never types passwords, stops before send or pay.

Automations you can see.

Build workflows on a canvas like n8n, or just ask Orbit to build one. Schedules and folder watchers run read-only and hand you a report with suggestions; nothing changes until you click.

Your day, kept in mind.

To-dos with reminders morning, noon and evening, deadlines calculated in code (withdrawal, warranty, notice), letters drafted for you, a morning briefing and a “time to leave” nudge before appointments.

Routes that avoid 30 zones.

OpenStreetMap routing, roadworks and jams from Germany’s Autobahn service, saved places, and the route opens straight in your maps app — from your phone’s location if you allow it.

Time for yourself.

“Block social media for 30 minutes.” Orbit politely closes distracting apps and sites on the Mac, and in the iPhone app shows its own lock screen. Self-help, not a fortress — and always easy to end.

A technician on call.

Symptom, findings, cause with proof, fix with a way back. Compares today with the last day things worked, keeps a case file, checks network, drivers and hardware — and clean-ups only ever go to the Trash.

In your pocket, too.

A phone app served by your own computer: Today screen, chat, council, voice calls, camera, to-dos — plus an iPhone home-screen widget. On its own it still chats with free cloud models.

A pendant you can talk to.

A small round display with microphone and speaker: hold and speak, hear the answer, confirm Orbit’s questions, see time, weather and steps, control music — and remember where you parked.

And more

  • Projects with lasting context
  • Long-term memory
  • Skills
  • MCP tool packages
  • Coding mode: plan, test, fix
  • Calendar & reminders
  • Mail drafts — never sent by Orbit
  • Product & price comparison
  • Image generation
  • Smart home via Home Assistant
  • Natural local voice
  • Download progress
  • Remembers where you left things
  • Local model on your own PC
  • Simple & advanced mode
  • Pick only the features you want

05 Interaction

Meet the sphere.

Move your cursor and Orbit follows. Pick a state to see how the figure behaves in the app. Click the sphere to say hello.

Floating, breathing, glancing around — now and then a small hop.

Visual demo: the real figure and states from the Orbit app. No AI is running on this page.

06 Vision

Designed for what comes next.

One hub on your strongest machine. Every other device — laptop, phone, another PC — becomes a window into it. No ZeroIT server. No account but your own.

Hub · phone app · passkey sign-in · Tailscale · no ZeroIT cloud

07 Status

Still in orbit.

Orbit is in active development by ZeroIT. There is no download and nothing to buy — not yet. Built for macOS first, Windows next.

  • Desktop app on macOS — working, tested daily
  • Windows — runs, still being tested
  • Phone app & pendant — prototypes
  • Public release — no date yet