Resources · Desktop app

The whole workspace, on the machine you already trust.

A native application for macOS, Windows and Linux that talks to your own Barie deployment and to nothing else. Local files stay local, the work carries on when the network does not, and there is no browser tab between you and the thing you asked for.

Download Notes for IT
Barie your deployment

Reconcile the Q3 close against the folder on my desktop and flag anything that moved.

  • Read 41 local workbookson device
  • Matched against the ledgeryour VPC
  • 9 variances written uptraced

local files never left the machine0 B out

Why a desktop app at all

A browser tab cannot read the folder you actually work in.

Most of what an analyst is holding at any moment is not in a system of record. It is a folder, a scratch workbook and three PDFs somebody sent over. The desktop app reaches those without uploading them anywhere.

Local files stay local

Grant a folder and Barie reads it in place, on the machine. Nothing is uploaded to make it readable, and the same zero-egress guarantee that covers your servers covers your laptop.

The same Company Brain

It is your deployment behind the window, not a lighter copy of it. The same connectors, the same permissions, the same record of what was done, whichever surface you started from.

Survives a bad connection

Long runs keep their state across a dropped link, a closed lid and a restart. You come back to the run you left, not to the beginning of it.

Next to the tools you use

System-wide capture, a global shortcut, and a handoff into your editor for the coding agent. It behaves like an application, because it is one.

Download

Four builds, all signed and all reproducible.

Every build is code-signed and notarised, and every release publishes its checksums alongside the artefact. Deployed customers can also pull the same builds from their own internal mirror rather than from us.

Not yet deployed?The app connects to a Barie deployment and does nothing on its own. If you are still evaluating, start with a demo and we will point the app at a sandbox tenant.

Notes for IT

Nothing here needs an exception to your policy.

  • Managed installation. MSI for Intune and SCCM, a signed pkg and a configuration profile for Jamf, and deb, rpm and AppImage for Linux fleets.
  • One outbound destination, and it is yours. The app talks to your deployment's endpoint. There is no telemetry endpoint, no crash-reporting service and no update host outside your control.
  • Your identity provider, not ours. Sign-in is SAML or OIDC against the provider you already run, and the session inherits the same conditional access rules as everything else.
  • Folder access is granted, never assumed. The app can read a directory only after somebody grants it, and the grant is visible and revocable from your admin console.
  • Updates you schedule. Pin a version, mirror the artefacts internally, and roll the fleet on your own window. See product updates for how releases are published.

Specifications

What it needs, stated plainly.

Operating systems
macOS 14 or later on Apple silicon and Intel. Windows 11 and Windows Server 2022 on x64 and Arm64. Ubuntu 22.04 LTS, RHEL 9 and Debian 12 on x64.
Machine
8 GB RAM and 2 GB of disk. Inference runs on your deployment, not on the laptop, so the client is a client.
Network
One HTTPS destination: your own deployment endpoint. Compatible with default-deny egress, with a forward proxy, and with an air-gapped network reachable only internally.
Identity
SAML 2.0 or OIDC against your existing provider. No Barie account is created and no password is stored by the app.
Local data
Cached responses and run state are encrypted at rest with a key held in the operating system keychain, and are wiped on sign-out or on remote revocation.
Distribution
Code-signed and notarised on macOS, Authenticode-signed on Windows, and signed repository metadata on Linux. SHA-256 checksums published per release.
Audit
Every run started from the desktop lands in the same immutable trail as everything else, tagged with the device it came from.

Own your intelligence.

See the app pointed at a deployment of your own, reading a folder that never leaves the machine.

Book a demo How zero egress works