Lokalaise

Blog

Straight talk on local AI

Context, hands-on knowledge and clear positions on sovereign AI, knowledge management and data protection — written for decision-makers at data-sensitive companies.

An AI assistant ingests injected content and exfiltrates private data through a trusted-looking channel to an attacker — an image of a data leak.AI Security

When the AI assistant becomes the data leak: what EchoLeak and SearchLeak teach

One click on a real microsoft.com link — and the mailbox, MFA codes and files are at the attacker's. SearchLeak (June 2026) and EchoLeak (2025) reveal a pattern. We explain the lethal trifecta, why these leaks work, and what a local, permission-aware AI changes about the attack surface — and what it doesn't.

A sovereignty scale from data residency through operational autonomy to legal sovereignty, referencing the BSI C3A criteria catalogue.Cloud Sovereignty

BSI C3A: When is a cloud truly sovereign?

On 27 April 2026 Germany's BSI published the C3A criteria catalogue — the first yardstick for when a cloud is truly sovereign. We unpack 'Cyber Dominance', the six dimensions of sovereignty, and why data residency is not data sovereignty.

Diagram contrasting a remote frontier model in the cloud with a local AI stack grounded in your own documents, in the Lokalaise RASTER style.Sovereign AI

Fable 5 is here — and why the strongest AI model alone isn't enough

Anthropic unveiled Fable 5, the most capable publicly available AI model to date — and it was gone within days. What the episode reveals about frontier models, digital sovereignty and the real lever: AI grounded in your own knowledge.