Product Pricing About Careers Blog Alpha Talk to us Download the alpha →
Bring your own model Built on Chromium Hardware-bound identity
Local-first · agentic · yours

The web, on your terms.

Dart is a Chromium browser that hands the controls back to you. The AI agent runs on your machine, your identity is sealed in hardware, and you plug in whatever model you already pay for. No surveillance layer. No token markup. No one in the middle.

Private alpha open now · general release early Q4 2026

Agent · Research task local inference
summarise · what does Article 17 require of a SaaS vendor and by when?
Article 17 ('Right to erasure') requires SaaS vendors to delete personal data without undue delay when requested — typically within 30 days. Vendors must also instruct downstream processors to erase. Exemptions apply for legal obligations and public interest archiving.
LOCAL inference ran fully on-device · 0 bytes sent
Bring your own model — any provider

Dart works with every major LLM provider and every local runtime. You own the inference. We build the browser.

The privacy crisis hiding in plain sight

Your browser is the most surveilled software you run.

Every search, every tab, every autofill — your browser is the richest data source your device generates. The incumbents monetise all of it. Dart is the first browser designed from the ground up to invert that relationship.

98%
of top browsers send telemetry back to vendor servers by default. Most require experts to disable it.
$0 to you
of the hundreds of dollars per user per year that browser telemetry generates for ad platforms. You are the product.
1st
browser to combine post-quantum cryptography, local-first AI agents, and BYOM in a single Chromium fork.
Three pillars, one browser

Privacy. Intelligence. Sovereignty.

Dart is built on three non-negotiable guarantees. They compound: strong cryptographic identity makes the agent trustworthy; local AI makes privacy enforceable; open model choice makes the whole thing yours.

01 / Cryptographic Identity

Hardware-bound. Quantum-safe.

Your identity is attested by a hardware security module — TPM on Windows/Linux, Secure Enclave on macOS. Keys never leave the chip. Post-quantum algorithms (ML-KEM, ML-DSA) are on by default for new sessions.

when · signing into banking, enterprise SSO, any high-stakes auth
02 / Local-First AI Agent

Agent runs on your machine.

The Dart Agent indexes your tabs, history, bookmarks, and local files. It answers questions, summarises pages, and completes tasks — all on-device. No prompt leaves your machine unless you explicitly choose a cloud model.

when · research, summarisation, form-filling, agentic workflows
03 / Bring Your Own Model

Your model. Your terms.

Connect any provider — Anthropic, OpenAI, Ollama, vLLM, LM Studio, OpenRouter. Credentials live in your OS keychain. We never proxy or mark up inference. Dart charges for the browser; you own the intelligence.

when · always — BYOM is not a feature, it's the architecture
The agentic layer

Every tab becomes a knowledge source.

The Dart Agent maintains a local semantic index of everything you read. Ask it anything — compare two papers you read last week, find the clause in that PDF you signed, draft a reply grounded in your actual browsing context.

01

Full-context awareness

The agent reads your open tabs, recent history, bookmarked pages, and local documents. It answers with citations, not hallucinations.

02

Agentic workflows

Chain tasks across tabs: research → summarise → draft → send. The agent navigates, fills forms, and extracts data — always within bounds you set.

03

Transparent trace

Every agent action is logged to a local, human-readable audit trail. You see exactly what it read, what it skipped, and why it concluded what it concluded.

agent/research.dart · 4 sources semantic index
compare · GDPR gives 30 days; what does CCPA say and are there exceptions?
CCPA §1798.105 requires businesses to honour deletion requests within 45 days, extendable once by another 45 (90 days total with notice). GDPR's 30-day limit is stricter. Both share exemptions for legal holds and fraud prevention. Your bookmark PDF confirms the 90-day CCPA window applies to service providers too.
LOCAL 4 sources · 0 bytes to cloud

Product preview with sample data. Inference runs fully on-device when a local model is selected.

Bring your own model

We don't sell tokens. You don't pay markup.

Connect Dart to the LLM provider you already pay for, or point it at a local model on your laptop. We never proxy or mark up inference traffic. This is a permanent design choice, not a launch limitation.

Cloud key

Paste your API key. Validated client-side and stored in the OS keychain. Nothing transits our servers.

AnthropicOpenAIGoogleOpenRouter

Local model

Auto-detects models running on localhost. Works fully offline. The only tier where regulated industries can run agents without risk.

OllamavLLMLM Studio

OAuth sign-in

One-click provider sign-in. We never see raw credentials. Tokens stay on-device. Easiest path for non-power users.

Anthropic ConsoleOpenAI

Enterprise gateway

Your admin provides a gateway URL; the team signs in via SSO. Standard for Team and Enterprise tiers.

LiteLLMBedrockVertex
Hardware-bound cryptography

Finally, a browser that answers \"who am I?\" with hardware.

Dart's identity layer uses your device's secure hardware — TPM 2.0 on Windows/Linux, Apple Secure Enclave on macOS — to attest your identity. Keys are generated inside the chip and never exported. Post-quantum algorithms are on by default.

Identity attestation · session log live
TPM
hardware security module, keys never exported
PQC
ML-KEM + ML-DSA, quantum-safe by default
session verifications
hardware key attestation✓ passed
post-quantum handshake✓ ML-KEM-768
local agent inference0 bytes sent
From early users

People who've felt the gap.

"We evaluated six privacy-focused browsers for our legal team. Dart was the only one that could run local AI agents and provide hardware-attested identity for our SSO. The BYOM architecture meant our counsel could use the models our firm already licenses. Nothing else came close."
Marcus R.
CTO · Global law firm · London
team size280 counsel, 4 offices
requirementlocal AI, hardware identity, BYOM
alternatives5 browsers evaluated, none qualified
outcomeDart deployed firm-wide, Q2 2026
local agent
"The Dart Agent summarised 40 tabs from my research session in about 8 seconds, running entirely on my M3 Max. Not one character left my machine. That's the promise everyone else makes and nobody keeps."
Simone P.
Investigative journalist · Berlin
post-quantum
"We're in fintech. Harvest-now-decrypt-later is a real threat model for us. Dart is the only browser that ships PQC key exchange by default rather than as an experimental flag."
Arjun K.
Security engineer · payments startup · Singapore
BYOM
"I use Claude for creative work, Llama for anything sensitive, and a fine-tuned model for my codebase. Dart lets me switch in one click. No other browser even tries to solve this."
Tara L.
Indie developer · Auckland
privacy
"I've been running Pi-hole for years and using Firefox with uBlock. Dart's telemetry model is the first I've seen that's genuinely off by default rather than opt-out-if-you-know-where-to-look."
Devin M.
DevOps engineer · Chicago

Quotes from private alpha participants, shared with permission and lightly edited for length. Roles and locations are as self-described; surnames are abbreviated for privacy.

Frequently asked

Questions, answered.

Is Dart just another privacy browser?
No. Privacy browsers block trackers. Dart does that too, but it goes further: hardware-attested identity replaces password-based auth, a local AI agent runs your tasks on-device, and BYOM lets you choose which intelligence powers the browser. It's a new category, not a better ad-blocker.
Why build on Chromium?
Web compatibility. Chromium has the widest site support, the most hardened V8 engine, and the largest security research community. We strip the Google services, the telemetry, and the ad infrastructure, then add our own layers on top. Building from scratch would give you a purer codebase and a broken web experience.
What does "hardware-bound" mean in practice?
Your cryptographic private key is generated inside your device's secure hardware module (TPM 2.0 on Windows/Linux, Secure Enclave on macOS). The key cannot be exported or copied — not even by a user with admin rights. Signing operations happen inside the chip. If someone steals your device, they can't extract the key.
What data does Dart send to your servers?
Almost nothing, by design. Crash reports (opt-in only). Licence validation (a signed token, no browsing data). Update checks (your current version number, nothing else). Your browsing history, tab content, agent prompts, and inference traffic never reach us. Full details on the security page.
Does the agent read everything I browse?
Only what you tell it to. You configure which domains and tab groups the agent indexes. A work profile can be fully indexed; a personal profile can be agent-off. The index is local-only — it never syncs to our servers unless you explicitly enable cross-device sync (paid tiers), and even then only the semantic index, never raw page content.
When can I use it?
Private beta is running now on macOS and Windows. Linux is in alpha. Public beta opens Q3 2026, and general availability across all tiers (Personal, Pro, Team, Enterprise) lands early Q4 2026. Get on the waitlist below and we'll write to you personally.
Private alpha

Take back the front door to the web.

Be among the first to run a browser that works for you instead of watching you. We onboard new testers every week and read every request by hand.

No commitment · a real person writes back