Praxa

Product

One agent. Eight kinds of work. One set of rules.

Praxa runs the work that does not fit in a single reply — and stops for you before anything leaves the building.

Free while we are in beta. Sign in with Apple or Google.

Praxa is one AI agent with eight kinds of work it does well: missions that run in the background, deep research, its own email inbox, a browser it can drive with your approval, memory you can read and edit, document and media creation, voice and on-device modes, and connections to the apps you already use.

The platform

Each capability names the job it does, and the line it will not cross

Open any card for the detail: how it works, what it costs, and exactly where it stops and waits for you.

Three runtimes, one identity — and each is honest about its limits.

Cloud chat

The full tool set on iPhone and the web: missions, research, email, browser automation, memory, and creation, every committing action gated by approval.

How approvals work

Voice

Real-time speech on iPhone with the same memory and identity. A narrower tool set by design — a hands-free conversation is no place to spend money.

Voice and on-device

On-device

Runs fully offline on an iPhone with Apple Intelligence. Nothing leaves the device, and it can never commit an action.

What stays on the device

Governance

The controls are mechanisms, not instructions

Every gate below is enforced in the backend, underneath the model, so it holds even when the assistant is talked into something it should not do.

Read the security model
  • Approval before commitment

    Sending, buying, posting, submitting, and account changes stop and wait. The card shows the exact payload and destination, matched literally against what runs.

  • Roles checked in the database

    Sixteen team permissions across messaging, membership, agenda, connectors, and settings — checked underneath the model, not suggested to it.

  • Credentials stay outside the model

    Generic tools refuse password values. Approved device fill stays bound to the live site's host without exposing the value, and connection tokens remain in your device Keychain until a request needs them.

  • Sensitive data withheld

    Health data is stripped before it reaches memory or context, and the on-device model cannot write Health at all. Camera frames and face landmarks are never uploaded.

Connectors

It works with the tools your team already lives in

Connect a service once and it becomes available under your permissions. Anything Praxa cannot reach natively, it can reach through an open MCP server.

See the connector list

Connects to 120+ apps, plus open MCP

  • Gmail
  • Google Calendar
  • Google Drive
  • Outlook
  • Slack
  • Notion
  • GitHub
  • Linear
  • HubSpot
  • Salesforce
  • Zendesk
  • Intercom

See what it can do for you.

Download for iPhone, or open Praxa on the web. Free while we are in beta.