UNBOUND
Your AI team. Your hardware. Your data stays where it is.
Unbound runs a team of AI bots on machines you control. Connectors talk straight to your services, credentials never leave your vault, and nothing routes through a vendor cloud.
- Free for local and self-hosted use
- AES-256-GCM credential vault
- Fully offline with local models
What stays on your machine
Everything your team touches, by default.
A hosted agent passes every connector, credential and file through someone else’s infrastructure. Unbound takes that host out of the path.
Conversations, memory and files
Stored in your workspace or persistent Docker volumes. Starting Unbound sends none of it anywhere.
Direct to the service
Email, calendar, drive and code requests go from your machine to the service you connected, not through an agent host.
Encrypted on disk
API keys and tokens live in an AES-256-GCM vault. On the desktop the key sits in your OS secure storage.
Local models, zero egress
Point a bot at Ollama, LM Studio or vLLM and a task’s prompts, files and context never leave the device.
Deployment
Run it where your policy says it has to run.
On the machine in front of you
Install on a Windows PC. Bots get their own working environments while you keep using yours.
- Nothing to host
- Best for individuals and small teams
On a server you operate
Run the orchestrator on a second PC or a server in your rack. Your laptop can sleep while work continues.
- IT owns the perimeter, backups and access control
- Control plane binds to localhost by default
Your keys, your contracts
Use your existing agreement with a model provider. Only the task context goes to the model; the rest stays home.
- Swap providers without migrating data
- Or go fully local and send nothing
For teams that answer to someone
Data a host never holds cannot leak from it.
A breach, legal demand or policy change at an agent provider does not reach a workspace that provider never stored.
No third-party retention
There is no vendor copy of your conversations, memory or tool output to subpoena, leak or train on.
Scoped connector permissions
Every new plugin on a hosted agent widens what that provider can reach. Locally, it widens only what your own machine can reach.
Local by default
The control plane listens only on the local machine. Exposing it to a network is your decision, behind your access controls and transport security.
Pricing
No seat fees. No usage tier.
Running Unbound locally or on your own server is free. Your model provider and your hosting bill you directly, so there is no middleman markup on inference.
100%
Free for local and self-hosted use.