Partners
Six technical bricks, no opaque SaaS partnership. Every component is documented, verifiable and, for the majority, replaceable with an open-source equivalent if you wish.
The Mac Mini M4 is the hardware foundation. macOS provides FileVault, Keychain, Time Machine and Developer ID signatures.
Apple supplies the machine, the OS and the cryptographic chain of trust. PrivateCore runs natively on Apple Silicon, without a VM or compatibility layer.
Apple Silicon delivers the best performance/watt on the market. Apple's controlled supply chain limits the risk of hardware backdoors. The Secure Enclave protects keys at the silicon level.
Local LLM runtime to run Mistral, Llama, Phi and embedding models directly on your Mac.
Ollama is an open-source runtime that downloads GGUF/safetensors models and serves them via a local REST API. PrivateCore uses it for chat, mail classification, semantic search and OCR.
Your AI runs on your hardware. Your prompts, documents and accounting data never leave for OpenAI, Anthropic or Google. The Ollama code is auditable and the community is very active.
French open-weight models downloaded once then run locally via Ollama (Mistral Small, Mixtral, Codestral).
Mistral AI publishes the weights of several of its models under Apache 2.0. PrivateCore ships Mistral Small by default (categorisation, summarisation) and Mixtral 8×7B (reasoning, accounting synthesis).
French and European model, aligned with GDPR values. Weights are downloaded once and everything runs offline afterwards : no quota, no usage cost, no censorship.
Zero-config WireGuard mesh VPN. Connects all your devices to your Mac Mini through a private encrypted network.
Tailscale builds a peer-to-peer network overlay between your devices. No port is exposed to the Internet, traffic flows directly between nodes, and authentication uses your identity (Google Workspace, Microsoft, GitHub, OIDC).
Secure remote access without static IP, DynDNS or NAT. The client code is open-source and you can self-host the coordinator (Headscale) if you want to take Tailscale itself out of the loop.
Open-source IPS that detects and blocks network attacks via a community blocklist of malicious IPs.
CrowdSec parses your Mac Mini logs, detects attack patterns (brute force, scan, web exploits) and applies temporary bans. It anonymously shares malicious IPs with the community for collective defence.
Collective, local, transparent protection. No proprietary agent, no hidden telemetry, no cloud-only : unlike commercial EDRs. The code is auditable and detection rules are in YAML.
Apple MDM for multi-site deployments: zero-touch provisioning, policies, managed updates.
Mosyle is an Apple Business Manager-certified MDM. PrivateCore uses it optionally to push a standardised config on Mac Mini fleets (FileVault, firewall, Tailscale, Ollama, signed PrivateCore app).
Clean and reproducible multi-site deployment. Ideal for hotel groups, restaurant chains, multi-office firms installing several Mac Minis. Optional : a single-site setup does not need it.
Every critical dependency is open source or proprietary with visible code. You can check what runs.
Open-source bricks can be swapped without asking us (e.g. Ollama → llama.cpp, Tailscale → Headscale).
No vendor receives your business data. The only outbound requests are documented in /audit.
No opaque SaaS partnerships. All our choices are auditable and, when technically possible, replaceable.
A bespoke install, same-day reply, and your Mac Mini delivered in 24h.
