Your data

Overshow keeps the local capture index on your device. Sharing with your engagement, exporting content or connecting an external service creates a separate transfer under your control. The Technology page describes each path.

Storage and transfers

Encrypted at rest on your laptop

The local database is encrypted with key material derived from your platform keychain. It is not automatically replicated; content enters the organisation repository only when you choose to share it.

Processed on-device

Text extraction and full-text search run locally on Windows and macOS. Ask uses an on-device language model on the Mac. Built-in capture and retrieval do not send frames or queries to an external model.

Account and transfers

Routine traffic covers account, billing, and device registration. Explicit publication, exports, Microsoft 365 Copilot and connected AI apps are separate transfers under your control.

For the architecture split between laptop and cloud, see Technology.

What Overshow never does.

No automatic cloud copy of your private history

There is no server-side replica of the local capture index. The organisation repository contains only what consultants explicitly share, with its source excerpts.

No retained screen recordings

Screen frames are read for text and context, then discarded. Overshow keeps the understanding, not the pixels.

No training on your data

Your private history is not a training corpus. Models are trained elsewhere and shipped to your device.

No silent sharing, ever

There is no content telemetry on what you capture, search, or ask. Sharing happens only through an action you take.

Capture controls

Pause capture from the menu bar (or the tray on Windows) or the app. Ignore lists and exclusion categories keep sensitive surfaces out entirely, and no admin or cloud process can override them on your behalf.

Capture

Pause all captureOne action

Password managersAlways excluded

Private browsing and remote desktopsBuilt-in rules

Banking, health, and custom patternsOptional blocks

What Overshow's servers see

Sign-in and billingRoutine

Device registration metadataRoutine

Aggregate licence stateRoutine

Your local capture index, searches, and questionsNot replicated

What you share, with its source excerptsOnly when you share it

Your own Copilot's questions and returned excerptsKept in your Microsoft 365, not by Overshow

Your data, on your terms, including deletion.

Retention is configurable. Exports and file mirrors write to a destination you choose, which may be cloud-synced. Deleting the local database removes the private history from that computer. Content already shared to the organisation repository follows its separate retention and deletion controls.

Retention configurable from Settings
Exports and file mirrors use destinations you choose
Delete the local database with one explicit action
Shared organisation content has a separate deletion boundary

Settings, data

RetentionYour choice

DatabaseEncrypted locally

Exports and mirrorsChosen destination

Delete everythingOne action

Before you install

Capture, search, and Ask stay on your machine. If you connect a cloud AI client, queries and returned snippets it retrieves are sent to that provider. A local client keeps everything on your computer. Sharing sends only what you choose, with its source excerpts, to the organisation repository. Exports and file mirrors can write to a cloud-synced folder you choose, submitted diagnostics can include text you attach, and optional URL enrichment contacts allowed sites.

The local database is encrypted per user on the machine; organisation policy does not grant direct access to it. The consultancy grants colleagues access per engagement, and they see only what you choose to share, with its source excerpts. Personal AI connections are a different route: excerpts returned to Microsoft 365 Copilot, plus prompts, answers and citations, enter your organisation's Microsoft 365 environment, where authorised compliance administrators may access them under its policies. The consultancy controls which AI connections are permitted.

Routine traffic contains account, billing, device registration and aggregate licence state. Sharing sends what you choose, with its source excerpts, to the organisation repository; a submitted feedback diagnostic can include text you attach. Built-in local searches and Ask do not send their questions or answers to Overshow. A personal Microsoft 365 Copilot connection separately relays queries and returned excerpts through Overshow's gateway to Microsoft. The wider local capture index is not replicated to the repository.

Review the controls

Review the Trust Centre or book a walkthrough and inspect the local model with us.

Book a walkthrough Visit the Trust Centre