# BackBrain

> Free private-beta Windows AI operator, with an optional Android companion.

Passwords and one-time codes stay on the PC and are not written into transcripts. Credential screens are not sent to a cloud model. Other task text can go to a model you chose. Local-only mode blocks cloud model calls; it is a setting, not the default.

Everyday reading and navigation can run without a stop when you have allowed that. Send, pay, buy, and submit need your approval for that task. Related later steps do not each ask again. Delete requires a clear delete, remove, or trash request and a separate confirmation of the exact files. Organizing never means deleting. The model cannot approve its own delete.

You can type or paste a code on the PC, or use linked Gmail or Outlook when that path is available. Automatic Android notification relay is not guaranteed in this private beta. If a code is missing, the task waits. Codes are not written into transcripts.

Documents: Excel workbooks, PowerPoint decks, Word files, and PDF operations on the PC. Review the results.

Learning: It remembers steps whose results were real, such as a file landing on disk. The next similar run may reuse those steps. If a button moved or the page changed, it reads the live page again. Memory stays on the PC, not in the password store or as a procedure sent to a BackBrain server. Reasoning calls may still be needed.

## Pages
- Home: https://backbrain.in/
- Demo: https://backbrain.in/backbrain-demo/
- Portal work in tax season, without the tab marathon: https://backbrain.in/use-cases/ai-tax-filing/
- The assistant an accounting practice uses for the clicking: https://backbrain.in/use-cases/ai-for-cas/
- Reports sent on WhatsApp Desktop, after you approve: https://backbrain.in/use-cases/whatsapp-reports/
- Bank statements, downloaded on your PC, with proof: https://backbrain.in/use-cases/bank-statements/
- Where the agent runs changes what it can touch: https://backbrain.in/compare/local-ai-vs-cloud-ai/
- Chatbots talk. BackBrain does the task.: https://backbrain.in/compare/ai-agents-vs-chatbots/
- An on-device agent can click through a portal. It cannot do your tax judgment.: https://backbrain.in/blog/automate-income-tax-filing-india/
- Why on-device execution matters for private tasks: https://backbrain.in/blog/on-device-ai-privacy/
- Put recurring paperwork on a shorter leash: https://backbrain.in/blog/ai-financial-admin-autopilot/
- What is a local AI agent?: https://backbrain.in/blog/what-is-a-local-ai-agent/
- How a portal gets easier the second time: https://backbrain.in/blog/how-backbrain-learns-your-bank-portal/
- Three levels of control: https://backbrain.in/blog/autonomy-tiers-explained/
- Your sessions stay yours: https://backbrain.in/blog/ai-agent-session-persistence/
- Show it, tell it, or correct it: https://backbrain.in/blog/teach-mode-watch-and-learn/
- One-time codes, with a clear way to enter them: https://backbrain.in/blog/otp-relay-phone-to-desktop/
- The operator stays on your PC. You choose the model.: https://backbrain.in/blog/cloud-model-vs-local-model/
- A record you can check: https://backbrain.in/blog/tamper-evident-audit-trail/
- Name files by what is inside them: https://backbrain.in/blog/smart-file-organizer/
- PDFs as working files: https://backbrain.in/blog/pdf-automation/
- A provider outage should not erase the task: https://backbrain.in/blog/ai-provider-outage-resilience/
- What BackBrain can do: https://backbrain.in/use-cases/
- How BackBrain compares: https://backbrain.in/compare/
- Frequently asked questions: https://backbrain.in/faq/
- Learn how BackBrain works: https://backbrain.in/learn/
- Blog: https://backbrain.in/blog/
- Glossary: https://backbrain.in/learn/glossary/

## Contact
hello@backbrain.in


## Full website context

This is a plain-text copy of the public product pages. Private beta is not general availability. The illustrated demo is not a live screen recording. Do not invent availability dates, customer counts, or capabilities beyond these pages.

# Home
Source: https://backbrain.in/

BackBrain AI 
Use Cases Compare Learn FAQ Blog 
Reserve Early Access 
Use Cases Compare Learn FAQ Blog 
“Chatting with AI is fun. Having AI actually do your real-world tasks is something else entirely.”
Your Personal AI That Actually Does the Work. 
BackBrain is an AI operator for your Windows PC. Create spreadsheets, collect PDFs, and send approved reports using your real browser, apps, and files. Passwords stay on your PC. You approve sensitive tasks. An Android companion is optional.
Runs on your Windows PC. An Android companion is optional. Your files, transcripts, and learning stay on your machine. 
It reads the live page or app and decides the next step. It is not a script written for one site. 
It can create Excel workbooks, PowerPoint decks, and Word documents, and it does not call a download finished until the file is on disk. 
Repeat chores can get easier because it remembers what worked. Reasoning calls may still be needed. 
Free during private beta · Watch the Demo 
Email address Reserve Spot 
Free Windows private beta. Email only; no payment required.
Done
What It Does
What BackBrain Does
Real chores, finished — on the real websites and apps you already use.
You might say: download last month’s statement from my bank and send it to my accountant. BackBrain opens that bank’s own website in your browser, uses a password from the vault on your PC when you allow it, waits for a one-time code (you can type it; automatic phone relay is not guaranteed), sets the dates, and downloads the file. It checks the file is really on disk. Then it opens WhatsApp Desktop or email and sends only after you approve.
The same pattern works for other portals, folders, and documents. It can build an Excel workbook, a PowerPoint deck, or a Word file from material you already have. It does not give tax, legal, or accounting advice. You review anything that will be submitted.
Passwords and one-time codes stay on your PC and are not logged. Other task text can reach a cloud model you chose. Local-only mode blocks those calls; it is a setting, not the default.
Every run ends with a searchable transcript and a tamper-evident audit record, so you can see exactly what was done.
Illustrated Task Walkthrough
See a Real Task, Start to Finish
Watch it plan, drive the screen, ask for what it needs, and check what it can verify.
Loading demo…
Watch it read the live page and explain its next step in plain language.
A send waits for your approval.
You can enter a one-time code on the PC. Automatic phone relay is not guaranteed in this beta.
See it verify the downloaded file exists before it says "done".
Open History afterward and read the full transcript of the run.
Open the full demo ↗ 
The Fundamental Gap
Why a cloud sandbox can’t do your real work
A cloud operator runs in someone else’s browser. It cannot reliably reach the desktop apps and folders on your PC. BackBrain runs where the work already is.
Cloud-Sandbox AI
Your desktop apps: usually unavailable 
Your files: often an upload first 
Your phone: often disconnected 
Learning: often starts cold 
Document creation varies 
BackBrain on your PC
Your desktop apps: yes, on your Windows PC 
Your files: works in your folders. Organize never means delete 
Your phone: optional Android companion for approvals and instructions. Automatic one-time codes are not guaranteed 
Learning: remembers verified steps on your PC. A changed page goes back to live reasoning 
Documents: can create Excel, PowerPoint, and Word files on your PC 
Full Capability Suite
Everything Your Digital Life Demands
One operator for the browser, desktop apps, files, email, and an optional phone companion, under rules the model cannot turn off.
Any website
It uses the site’s normal pages. There is no script per bank or per portal. Success still depends on the site, the login, and your approval.
Desktop apps
It can drive installed Windows apps when that is the direct path.
Files and documents
Rename and file by what is inside the document. Create Excel workbooks, PowerPoint decks, and Word files. Merge, split, and fill PDFs. Organizing does not delete.
Email
Linked Gmail or Outlook. Read and search for the task. Send only after approval. It cannot permanently delete mail.
Android companion
Pair on your Wi-Fi. Approve and send instructions to the PC. Not a full second operator, and not a guaranteed one-time-code reader.
Connectors
Built-in tools, plus MCP servers and REST recipes you add.
Memory
It keeps verified successes on the PC so repeat work can be easier. Reasoning calls may still be needed.
More than one helper
A run can use helper reasoning. Helpers do not get your vault or a private bypass around approval.
Complete Capability Matrix
The Complete Capability Matrix
The capabilities of this Windows private beta, under the same approval rules.
In the Browser 
Open pages, click, type, scroll, download, and upload in Chrome or Edge
Human-like mouse and typing; reads the live page
Screenshots when needed. Credential screens are not sent to cloud models
Type or paste a one-time code, or use linked email when available
A download counts only when the file is on disk
On the Desktop 
Files & Documents 
Email & Messaging 
Mobile (Android Companion) 
Connectors & Integrations 
In the Browser
Open pages, click, type, scroll, download, and upload in Chrome or Edge
Human-like mouse and typing; reads the live page
Screenshots when needed. Credential screens are not sent to cloud models
Type or paste a one-time code, or use linked email when available
A download counts only when the file is on disk
On the Desktop
Operate installed Windows apps
Prefer the installed app when that is the direct path
WhatsApp Desktop is the supported messaging app
Files & Documents
Search, rename, move, and zip
Create and edit Excel workbooks on the PC
Create PowerPoint decks, Word documents, and text files on the PC
PDF merge, split, rotate, watermark, form fill, and text extract
Download proof on disk
No delete unless you clearly ask and then confirm the exact files. Organizing does not delete
Email & Messaging
Linked Gmail or Outlook: read, search, reply, and send with approval before send
It cannot permanently delete mail
WhatsApp Desktop: open a chat, attach a file, and send after approval
Recent messages are not proof that the recipient received or opened a file
Mobile (Android Companion)
Pair on your Wi-Fi, approve, and instruct the PC
Optional companion, not a second full desktop operator
Automatic notification codes are not a beta guarantee
Connectors & Integrations
Built-in tools, plus MCP servers and REST recipes you choose
Connector calls follow the same approval rules
Changed tools wait for your review again
Purchases need a mandate you set — merchant, amount cap, and expiry — plus approval
Real Execution
Real Tasks. Real Results.
Mail
Find a message or attachment, then reply or forward only after you approve.
Files and documents
Build an Excel workbook, a PowerPoint deck, or a Word file, or put a messy folder into named files. Organize does not delete.
Websites
Sign in on the site’s own pages, with your vault password and a code you can enter, then download or fill what you asked.
Desktop and phone
Use the installed app on Windows. Use the Android companion to approve or send a new instruction.
Portals
Walk a tax, government, or other portal you already use. You review before anything is submitted. BackBrain is not a tax adviser.
Research
Read the pages you point it at and write up what it actually saw. It should not wander off to extra sites.
Virtually limitless. Self-growing. Yours.
Work in your real browser, Windows apps, and files. Review the results and approve sensitive work. Success still depends on the app, site, login, and task.
Self-Learning
Teach It Once
BackBrain doesn't just learn from itself — it learns from you, in three ways. No scripting, no configuration screens. You talk to it, correct it, or show it.
Show It
Watch-and-learn
You can demonstrate. It should observe, summarize, and save only when you say save. It must not store what you typed into a secret field. A saved demonstration does not skip approval or promise automatic execution.
Tell It
Chat commands
In chat, say "remember: always use the PDF format on this portal" and it becomes a durable instruction, surfaced automatically every time BackBrain works on that site. Say "forget what you learned about that site" and it lists exactly what matches — and deletes only after you type a confirmation. Your memory, your rules.
Correct It Mid-Run
Live correction
You can interrupt a run and point it the right way. You can stop it, correct it, or take the mouse.
Self-Improving
It gets faster over time
Repeat work can reuse what worked. Live reasoning is still needed when the page changes.
Verified Success
BackBrain doesn't trust its own optimism. A step counts only when there's evidence: the page actually advanced, the file actually exists on disk. Only verified wins become memory.
Reuse memory
The next similar run can reuse steps whose results were real.
Read again
If the page has changed, it goes back to reading the live page.
Keep it local
Memory stays on your PC. Repeat work may still need reasoning calls.
Verified steps from a partial run may help the next try. History keeps a searchable transcript with secrets removed.
Your Sessions Stay Yours
An assistant that logs you out of everything after each task isn't saving you time. BackBrain treats your logged-in sessions as yours: it finishes the job and leaves your accounts signed in, so the next task starts where this one ended.
It never signs you out of a site or app on its own — a built-in guard blocks stray logout clicks, even if the AI considers one. 
It logs out only when you explicitly ask it to. 
Secure portals can still time out on their own. Credential screens are not sent to a cloud model. 
Connected to Everything
One agent on your PC
Windows is the product. Android is the optional companion. Mac, iPhone, and Linux are not available in this version.
Gmail 
Outlook 
Google Drive 
OneDrive 
GitHub 
Slack 
Notion 
WhatsApp Desktop 
YouTube 
Google Calendar 
MCP servers 
Any REST Service 
MCP
You can add MCP servers you choose.
REST recipes
A small recipe can expose an API you already use. Review it before use.
Tool Pinning & Safety
If a connector changes its tools after you approved it, BackBrain refuses to use it until you re-approve. Tool descriptions are screened for prompt injection, tool outputs are scrubbed before they reach the model, and any purchase requires a pre-authorized spending mandate — merchant, maximum amount, and expiry.
Android Companion App
Your agent can take instructions from your phone
Pair once on your Wi-Fi. Approve a step or send a goal to the PC.
One-time codes. Type or paste them on the PC, or use linked email when available. Automatic phone relay is not guaranteed. 
Mobile approvals. Approve or deny from the companion paired on your Wi-Fi. 
Optional companion. Not a second computer that does every desktop task. 
Remote instructions. Send a task from your phone; your desktop executes it. 
Private pairing. Phone and PC link over your own Wi-Fi with a QR code and device keys. No third-party cloud relay sits between your devices. 
BackBrain
Task received: "Send the report to Alex"
PC paired on Wi-Fi
● ● ● ● ● ●
Send instructions to your PC
Approval needed
Send 'Report.pdf' via WhatsApp Desktop to the requested chat?
Approve
Review
Architecture
Built to stay on your machine
Locally Installed
A real Windows application, not a website. Your sessions, files, learning memory, transcripts, and audit trail live on your machine — and you choose the AI brain: your own cloud key, or a fully local model with zero cloud egress.
Encrypted Vault
Credentials and tokens are encrypted on-device with Windows DPAPI and supplied just-in-time at the moment of use. Raw secrets — passwords, OTPs, PINs, tokens, card numbers — are never written to logs or transcripts. Credential screens are never sent to a cloud model.
Limited background work
Background work is limited. You can stop it. It is not an unbounded 24-hour operator.
Memory on the device
It remembers verified steps on the PC. A changed page goes back to live reasoning.
Suggestions you control
It can notice a saved instruction and suggest a task. You still approve sensitive steps.
Rules outside the model
Send, pay, buy, and submit need task-level approval. Delete needs a clear request and a separate confirm of the exact files. Organize never means delete.
Safety by Design
How control is split
Autonomy you can't trust is autonomy you'll never use. BackBrain's safety model isn't a settings page — it's built into the structure of the product, in a layer the AI itself cannot reach.
Three Tiers of Autonomy
Reading and navigation can be quiet when allowed. Send, pay, buy, and submit need your approval for the task; related later steps do not each ask again. Delete always needs its own confirmation of the exact files.
A Floor the AI Cannot Override
The model proposes the next step. A separate layer checks the kind of step. It cannot approve its own delete. You must clearly say delete, remove, or trash, then confirm the exact files.
A Tamper-Evident Record
The agent's actions are written to a hash-chained audit ledger — each record linked to the one before it, so after-the-fact edits are detectable. Combined with full run transcripts, you get a complete answer to "what exactly did it do?"
An Encrypted Vault
Credentials and tokens are encrypted on your device with Windows DPAPI and supplied just-in-time. Raw secrets — passwords, OTPs, PINs, tokens, card numbers — never appear in logs, transcripts, or exports. Prefer not to store a password at all? Session-only entry holds it in memory for one task and then clears it.
Redaction Before the Cloud
If you use a cloud AI model, BackBrain redacts sensitive data before anything is sent, and screens showing credentials are never transmitted. If you'd rather send nothing at all, local-only mode runs every AI decision on a local model — cloud egress blocked, with no silent fallback.
Defenses at the Edges
Connector tools are pinned — if a service changes its tools after you approved it, BackBrain refuses until you re-approve. Text arriving from websites and external tools is screened before it can influence the agent's reasoning. Purchases require a pre-authorized mandate: merchant, maximum amount, expiry. Background activity runs on strict budgets, with a kill-switch that stops everything instantly.
Model Flexibility
Your choice of model
BackBrain is the operator; you choose the intelligence that drives it. Nothing about the product locks you into one AI vendor — or into the cloud at all.
Bring Your Own Cloud Model
Plug in your own key for Azure OpenAI, OpenAI, Anthropic, Gemini, or Perplexity. Keys are encrypted on your device, and everything sent to the model passes through redaction first.
Or Run Fully Local
Point BackBrain at a local model (Ollama, LM Studio, or any compatible endpoint) and it reasons entirely on your hardware. In local-only mode, cloud egress is blocked outright — it will never silently fall back to a cloud provider.
Fallback Chains, Automatically
You can list another provider to try if one fails. If a cloud filter blocks a normal step, it can retry with less text. It does not bypass a site’s security check.
Survives Outages
It can retry, try another model you configured, or wait and let you take over. Repeat work may need fewer calls; it still may need live reasoning. Websites still need the internet.
The Autonomy Loop
How BackBrain Works
Tell It the Goal
Type it or say it, in plain language. BackBrain plans the route across browser, apps, files, email, and phone — and first checks its memory for a proven procedure from a past run.
It Executes, and Proves It
It reads the live screen, takes one action at a time, and verifies each step actually worked — the page advanced, the file exists on disk — before moving on. If it gets stuck, it re-plans, tries another method, or asks you; you can answer in chat or just take over the mouse while it watches and learns.
You Stay in Control
You can stop it, correct it, or take the mouse. History keeps the transcript. A send waits for approval; delete always needs a separate confirmation.
It reads the live page or app and decides the next step. Success still depends on the site, the login, and your approval.
Changelog
What you can expect in this beta
Windows operator, optional Android companion.
Full run History with searchable transcripts
Every run now keeps a complete, redacted transcript — search any past task and read exactly what was said and done.
Reads the live page
A redesign does not depend on one saved script. It can read the page again.
Learning from partial runs
A failed attempt can still teach the next try. Verified memory can help, but reasoning calls may still be needed.
Your accounts stay signed in
A new session guard means BackBrain never logs you out unless you explicitly ask — the next task starts where the last one ended.
Provider-outage resilience
AI provider down mid-task? BackBrain retries, fails over, keeps the run alive, and lets you take over while it watches and learns.
When a provider blocks a step
It can retry a normal step with less text. It does not bypass a site’s security check.
One-time codes
Type them, paste them, or use linked email. Phone relay is not guaranteed.
Forget a memory
You can tell it to forget a memory, and it should show you what it will remove.
Why BackBrain
Take back the busywork
Free during private beta. Windows, with an optional Android companion.
Reserve your spot below. Or email hello@backbrain.in .
Email address Reserve Spot 
Free Windows private beta. Email only; no payment required.
Questions? hello@backbrain.in 
Get in Touch
Have a question?
Email hello@backbrain.in. There is no phone line and no office address on this site.
hello@backbrain.in 
hello@backbrain.in 
Use Cases
Tax and government portals 
Accounting practices 
WhatsApp Desktop reports 
Bank statements 
Compare
Local AI vs cloud AI 
AI agents vs chatbots 
All use cases 
All comparisons 
Learn
Learn hub 
Portal work is not tax advice 
On-device AI and privacy 
Recurring paperwork 
What is a local AI agent? 
Glossary 
FAQ 
Blog 
Compare 
Contact
hello@backbrain.in 
BackBrain BackBrain Labs, Inc. 
Passwords stay on your PC Windows + Android BackBrain Encrypted Vault — On-Device 
hello@backbrain.in © 2026 BackBrain Labs, Inc.

# Portal work in tax season, without the tab marathon
Source: https://backbrain.in/use-cases/ai-tax-filing/

Portal work in tax season, without the tab marathon
BackBrain does the collection and clicking: statements from your bank’s website, attachments from email, folders named by what is in the file, and the steps on a tax or government portal you already use. You review before anything is submitted. BackBrain is not a tax adviser and does not choose your tax position.
How it works
It downloads statements and pulls email attachments you asked for.
It renames and files them. Organizing does not delete.
It signs in from the vault on your PC. If the site asks for a code, you can type it. Automatic phone relay is not guaranteed.
It shows you the draft. You decide whether it is submitted.
After you approve, it can save a redacted note of what happened.
Why on your PC
Passwords stay in the vault. The transcript is on your machine. A cloud model, if you use one, does not receive credential screens.
Who is it for?
Anyone who already files through a portal and wants the clicking done on their own computer. Freelancers and families can use the same pattern. Busy deadlines do not change the rule: you review before submit.
Questions and answers
Is it safe? It runs on your PC. It does not submit until you approve that task. You still check the figures.
Where is the password? In the vault on the PC, used only at sign-in, not written into the transcript.
Will it read the phone code every time? Not guaranteed in this beta. You can type the code.
Will it file without asking? No. Submission waits for your approval. That approval covers the task you accepted. It is not a second product that gives tax advice.
Related use cases
Accounting practices
Explore this task on your Windows PC.
WhatsApp Desktop reports
Explore this task on your Windows PC.
Bank statements
Explore this task on your Windows PC.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# The assistant an accounting practice uses for the clicking
Source: https://backbrain.in/use-cases/ai-for-cas/

The assistant an accounting practice uses for the clicking
Accountants and bookkeepers lose hours to portals and file names. BackBrain, on the practice’s own Windows PC, downloads statements, pulls email attachments, renames files by their contents, fills PDF forms from data you already have, and sends a report on WhatsApp Desktop or email after approval. It does not replace professional judgment.
What it can do
Collect statements and email attachments.
File them into client folders. Organize does not delete.
Walk a portal and wait for review before submission.
Deliver a finished file after you approve the send.
Confidentiality
Each password stays in the vault on that PC. There is no BackBrain cloud account holding every client’s password. If you use a cloud model, credential screens are not sent to it.
Audit
The transcript and the hash-chained record are how you answer “what did it do?”
A normal request
Someone asks for last quarter’s statement. You allow the task. BackBrain opens the bank’s site, signs in, downloads, checks the file, and sends it on WhatsApp Desktop or email after approval. A one-time code can be typed on the PC.
Questions and answers
Can it help with portal work? Yes, the repetitive signing-in, downloading, filing, and sending. You keep the judgment.
Where are client passwords? On that PC’s vault, not in a shared BackBrain account.
Does it replace an accountant? No.
Related use cases
Tax and government portals
Explore this task on your Windows PC.
WhatsApp Desktop reports
Explore this task on your Windows PC.
Bank statements
Explore this task on your Windows PC.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# Reports sent on WhatsApp Desktop, after you approve
Source: https://backbrain.in/use-cases/whatsapp-reports/

Reports sent on WhatsApp Desktop, after you approve
BackBrain drives the installed WhatsApp Desktop app. It opens the chat, attaches a file that is already on disk, and sends after you approve. It can read recent messages in that chat. That is not proof the other person received or opened the file.
Steps
You say who needs which file.
It finds or builds the file on your PC.
It opens WhatsApp Desktop and attaches the file.
It sends after you approve.
Privacy
The send happens in your desktop app, and passwords are not put in the transcript. BackBrain does not run a chat archive in the cloud. Other task text can reach a cloud model you chose.
A useful first report task
Example instruction: Find the report PDF in the folder I specify, show me its filename, and attach it to the chat I specify in WhatsApp Desktop. Ask for my task approval before sending.
Start with a file you have already reviewed. This separates two different questions: whether the report is correct, and whether it is attached to the right conversation.
Before approving
Check the exact filename and report period.
Check the recipient or group name in the installed desktop app.
Check that the file does not include information you do not intend to share.
The workflow requires WhatsApp Desktop on the Windows PC and an available signed-in session. Sending is not a promise of recipient receipt, and the optional Android companion is not a substitute for the desktop operator.
Questions and answers
Can it send files? Yes, after you approve the send.
Without permission? No.
Does it upload my chats to BackBrain? BackBrain does not run a chat archive in the cloud. The desktop app stays the place the message is sent.
Related use cases
Tax and government portals
Explore this task on your Windows PC.
Accounting practices
Explore this task on your Windows PC.
Bank statements
Explore this task on your Windows PC.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# Bank statements, downloaded on your PC, with proof
Source: https://backbrain.in/use-cases/bank-statements/

Bank statements, downloaded on your PC, with proof
Tell it the account and the period. It opens that bank’s own website, signs in from the vault, and downloads. If a code is required, you can enter it on the PC. Automatic phone relay is not guaranteed. It does not say the download worked until the file is on disk. Then it can file the PDF or send it on email or WhatsApp Desktop after you approve.
It is not limited to one bank, because it reads the live site instead of a script for one institution. Private beta does not mean every portal succeeds.
Password
Stored only in the Windows-encrypted vault on the PC, used at sign-in, not written into the transcript.
Start with a download, not a send
A low-risk first task is to collect one statement and stop. You can review the PDF before adding any message or submission to the workflow.
Example instruction: Open my bank’s own website, download the statement for the account and period I specify, save the PDF in my chosen folder, and show me the file path. Stop before sending or submitting anything.
Specify the account, period, and destination
Identify the account using the portal’s existing labels. Do not paste a password into the task prompt.
Give a precise date range, rather than relying on “the usual statement.”
Choose the folder where you want the file saved.
Check the result yourself
A file on disk is evidence that a download produced a file; it does not prove the document covers the right account or period. Open the PDF and check those details. A login prompt, one-time code, changed portal, or failed download can still require your intervention.
For a later send, name the recipient and channel explicitly. Approve that task, and do not treat the agent’s reading of recent chat messages as proof of delivery.
Questions and answers
Where is the password? In the Windows-encrypted vault on your PC, used only at sign-in and not written into transcripts.
How do I enter a code? You can type or paste a code on the PC, or use linked Gmail or Outlook when that path is available. Automatic Android notification relay is not guaranteed in this private beta. If a code is missing, the task waits. Codes are not written into transcripts.
How does it know the download worked? It checks that the file is really on disk. A send waits for your approval.
How does repeat work improve? It remembers steps whose results were real, such as a file landing on disk. The next similar run may reuse those steps. If a button moved or the page changed, it reads the live page again. Memory stays on the PC, not in the password store or as a procedure sent to a BackBrain server. Reasoning calls may still be needed.
Related use cases
Tax and government portals
Explore this task on your Windows PC.
Accounting practices
Explore this task on your Windows PC.
WhatsApp Desktop reports
Explore this task on your Windows PC.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# Where the agent runs changes what it can touch
Source: https://backbrain.in/compare/local-ai-vs-cloud-ai/

Where the agent runs changes what it can touch
A cloud agent works in a browser on someone else’s server. It usually cannot open your desktop apps or your folders. BackBrain is installed on your PC, so it can use your browser session, your installed apps, and your files.
Need Cloud assistant BackBrain 
Where the operator runs Their servers Your Windows PC 
Passwords Often have to be sent to the service Vault on your PC, used at sign-in 
Your files and desktop apps Limited On the PC 
Phone Often none Optional Android companion. Automatic codes are not guaranteed 
Offline The sandbox needs their cloud Websites still need internet. A local model can reason without a cloud key. Local-only mode is a setting 
Cost Often a subscription to them Free during private beta. A cloud model key is billed by that provider, not BackBrain 
Privacy
Passwords and one-time codes stay on the PC and are not written into transcripts. Credential screens are not sent to a cloud model. Other task text can go to a model you chose. Local-only mode blocks cloud model calls; it is a setting, not the default.
Outages
It can retry and try another model you configured, or wait. A remembered path may still need reasoning calls.
When to use it
When the task needs your real browser, your folders, or an installed app, and you do not want the password stored in a vendor account.
Another comparison
AI agents vs chatbots
Compare where the work happens and what you can check.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# Chatbots talk. BackBrain does the task.
Source: https://backbrain.in/compare/ai-agents-vs-chatbots/

Chatbots talk. BackBrain does the task.
A chatbot can tell you how to download a statement. BackBrain can open the bank’s site, download the file, and check it is on disk. You still approve a send or a submit.
Need Chatbot BackBrain 
What you get Text A file, a message, or a finished step you can check 
Websites and desktop apps No Yes, on your PC 
Passwords You type them yourself Vault on the PC, used at sign-in 
Sends No After you approve 
Asks first Not applicable Send, pay, buy, and submit need task-level approval. Delete always asks again 
Safety
Everyday reading and navigation can run without a stop when you have allowed that. Send, pay, buy, and submit need your approval for that task. Related later steps do not each ask again. Delete requires a clear delete, remove, or trash request and a separate confirmation of the exact files. Organizing never means deleting. The model cannot approve its own delete.
Check the result
Can you open the file or see the sent message? A chatbot leaves a paragraph. BackBrain should leave a result you can check. If it cannot verify the result, it should not claim success.
Another comparison
On-device AI vs cloud AI
Compare where the work happens and what you can check.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# An on-device agent can click through a portal. It cannot do your tax judgment.
Source: https://backbrain.in/blog/automate-income-tax-filing-india/

An on-device agent can click through a portal. It cannot do your tax judgment.
Updated 2026-10-03
BackBrain can help with the repetitive part of a portal you already use: sign in on your PC, move through menus, copy figures from documents on your machine, and show you a draft. You decide whether it is submitted. BackBrain is not a tax adviser, not a filing intermediary, and not a substitute for the official portal or a qualified professional.
What you still do
Choose the form, check the figures, and confirm the submission on the portal’s own screens.
What it can do
Open the portal on your Windows PC and sign in from the vault.
Use documents you already stored on the PC.
Show a draft.
Submit only after you approve that task.
If the site asks for a code, you can type it. Automatic phone relay is not guaranteed.
Your password is not written into the transcript. Page text may go to a cloud model if you use one. Local-only mode blocks that.
Questions and answers
Is AI filing legal? Using software does not remove your duty to file a correct return. Check the official portal. Ask a qualified professional when you are unsure.
Does it handle the code? You can enter it on the PC. Do not send a code to another person.
Do I still review? Yes.
Where is the password? In the vault on the PC.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# Why on-device execution matters for private tasks
Source: https://backbrain.in/blog/on-device-ai-privacy/

Why on-device execution matters for private tasks
Updated 2026-10-03
Private work needs access to your browser session, files, and installed apps. Where execution happens matters, but on-device execution alone does not mean every reasoning decision stays on the device.
The problem
A remote operator may require uploaded files or a remote login. BackBrain acts on the Windows PC where the work already is.
What local changes
Passwords and one-time codes stay on the PC and are not written into transcripts. Credential screens are not sent to a cloud model. Other task text can go to a model you chose. Local-only mode blocks cloud model calls; it is a setting, not the default.
Passwords are protected with Windows encryption and used only at sign-in. Session-only entry can keep a password in memory for one task and clear it afterward. Files are not uploaded to a BackBrain server. Learning stays on the PC.
Myths
Installed locally does not mean offline. Websites need the internet. A cloud model may receive task text with secrets removed. Local-only mode must be selected if you want to block cloud reasoning calls.
Privacy checklist
Know whether you selected a cloud or local model.
Credential screens are not sent to cloud models.
Secrets are removed from transcripts.
Reading can be quiet when allowed. Send, pay, buy, and submit need approval for the task.
Delete always needs a clear request and an exact-file confirmation.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# Put recurring paperwork on a shorter leash
Source: https://backbrain.in/blog/ai-financial-admin-autopilot/

Put recurring paperwork on a shorter leash
Updated 2026-10-03
Recurring paperwork includes statements, attachments, and reports. Repetitive steps can run from one instruction. You still approve a send or a submit.
Start with one monthly statement
Ask for last month’s statement from your bank’s own website. BackBrain can sign in from the vault, download the file, and verify it is on disk before filing it.
Keep review in the task
You can type or paste a code on the PC, or use linked Gmail or Outlook when that path is available. Automatic Android notification relay is not guaranteed in this private beta. If a code is missing, the task waits. Codes are not written into transcripts.
Tax-season work is portal clicking plus your review, not tax advice. You check the figures and decide whether to submit.
A routine is not unsupervised
You can schedule a routine and stop it. Sensitive steps still need approval. Background work is limited. Organizing never means deleting.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# What is a local AI agent?
Source: https://backbrain.in/blog/what-is-a-local-ai-agent/

What is a local AI agent?
Updated 2026-10-03
A local AI agent is software installed on your computer that performs tasks in your browser, desktop apps, and files. BackBrain is the Windows operator; an Android companion is optional.
Answers versus action
A chatbot can describe a task. An operator can carry out the steps and check the result. BackBrain should not call a download complete until the file exists on disk.
Local does not mean offline
Websites still need the internet. You can choose a cloud model or use a local model through Ollama, LM Studio, or a compatible endpoint. Local-only mode blocks cloud model calls; it is a setting.
What stays on the PC
Passwords and one-time codes stay on the PC and are not written into transcripts. Credential screens are not sent to a cloud model. Other task text can go to a model you chose. Local-only mode blocks cloud model calls; it is a setting, not the default.
Examples
Download a statement from your bank’s own website.
Walk a portal you already use, with review before submit.
Create Excel workbooks, PowerPoint decks, and Word files on the PC.
Organize a folder without deleting files.
Control
You can schedule a routine; sensitive steps still wait for approval; you can stop it. High-stakes decisions remain human decisions.
Everyday reading and navigation can run without a stop when you have allowed that. Send, pay, buy, and submit need your approval for that task. Related later steps do not each ask again. Delete requires a clear delete, remove, or trash request and a separate confirmation of the exact files. Organizing never means deleting. The model cannot approve its own delete.
How to evaluate a Windows AI operator
Judge an operator by observable work, not by a confident chat response. Begin with one task you can check, such as producing a document or saving an existing attachment to a chosen folder.
Give an instruction with a clear stopping point
Example instruction: Create an Excel workbook from the information I provide, save it in my chosen folder, and show me the saved file path. Do not send or submit it.
A saved workbook is a concrete output. Open it and review the data, formulas, and formatting before using it. Creation does not guarantee that every requested detail is correct.
Ask four questions before trusting the result
Did the expected file actually appear on the PC?
Does its content match the instruction?
Did any send, purchase, payment, or submission receive task-level approval?
Can you inspect what happened in the local history?
Installed locally describes where the operator works. It does not mean every reasoning step is offline: task text may reach your chosen cloud model. Credential screens and secrets have separate protections, and local-only reasoning requires selecting that setting.
A demonstrated task is not a benchmark for every app or website. The private beta still depends on the app, login state, available tools, and the task you request.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# How a portal gets easier the second time
Source: https://backbrain.in/blog/how-backbrain-learns-your-bank-portal/

How a portal gets easier the second time
Updated 2026-10-03
First run: read and verify
BackBrain reads the live site, signs in when allowed, and checks the downloaded file is on disk before saying it worked.
Next run: reuse what worked
It remembers steps whose results were real, such as a file landing on disk. The next similar run may reuse those steps. If a button moved or the page changed, it reads the live page again. Memory stays on the PC, not in the password store or as a procedure sent to a BackBrain server. Reasoning calls may still be needed.
Changed page: read again
A remembered route is not a reason to click the wrong control. If the page no longer matches, live reasoning takes over. The same approval rules still apply.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# Three levels of control
Source: https://backbrain.in/blog/autonomy-tiers-explained/

Three levels of control
Updated 2026-10-03
Reading and navigation
Everyday reading and navigation can proceed quietly when you have allowed that.
Sensitive work
Send, pay, buy, and submit need your approval for the task. Later steps belonging to that accepted task do not each ask again. A purchase also needs a mandate you set: who, maximum amount, and expiry.
Delete is different
You must clearly say delete, remove, or trash, then confirm the exact files. Clean up and organize never mean delete. The model cannot classify its way around this rule or approve its own delete. The rule sits outside the model.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# Your sessions stay yours
Source: https://backbrain.in/blog/ai-agent-session-persistence/

Your sessions stay yours
Updated 2026-10-03
BackBrain does not sign you out unless you ask. A session guard helps prevent stray logout actions, so a later task can use the session you already have.
The portal’s rules still apply
A bank or other portal can expire a session on its own. That timeout is the site’s rule, not a promise BackBrain can override.
When sign-in is needed again
Re-authentication uses the vault on your PC and may still need a code you enter. Credential screens are not sent to a cloud model.
You can type or paste a code on the PC, or use linked Gmail or Outlook when that path is available. Automatic Android notification relay is not guaranteed in this private beta. If a code is missing, the task waits. Codes are not written into transcripts.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# Show it, tell it, or correct it
Source: https://backbrain.in/blog/teach-mode-watch-and-learn/

Show it, tell it, or correct it
Updated 2026-10-03
Show it
Demonstrate a task. BackBrain observes without acting, summarizes what it understood, and saves only when you say save. It does not store secret text you typed.
Tell it
A standing note such as “on this site, download PDF” can be remembered for that site.
Correct it
Interrupt a run and point it the right way. You can take the mouse.
Forget it
Ask it to forget a memory. It should show the matching list and remove it only after you confirm.
Memory, not permission
A saved demonstration is memory, not a bypass of approval. It is not a promise of automatic execution in this beta. Repeat work still follows the same approval rules.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# One-time codes, with a clear way to enter them
Source: https://backbrain.in/blog/otp-relay-phone-to-desktop/

One-time codes, with a clear way to enter them
Updated 2026-10-03
Why a code stops a task
A website can ask for a short-lived code during sign-in. If the code is missing, the desktop task must wait rather than pretend sign-in worked.
The available paths
You can type or paste a code on the PC, or use linked Gmail or Outlook when that path is available. Automatic Android notification relay is not guaranteed in this private beta. If a code is missing, the task waits. Codes are not written into transcripts.
What pairing does
The Android companion pairs on your Wi-Fi for approvals and instructions to the PC. Automatic notification-code relay is not a beta guarantee.
Keep the code in the task
A code is used only for the task you approved. Do not send it to another person. It is not stored in the transcript.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# The operator stays on your PC. You choose the model.
Source: https://backbrain.in/blog/cloud-model-vs-local-model/

The operator stays on your PC. You choose the model.
Updated 2026-10-03
Operator versus model
BackBrain acts on your Windows PC. The model supplies reasoning. Your key is stored on the device; the model choice does not move the operator to a cloud browser.
Cloud choices
Bring a key for Azure OpenAI, OpenAI, Anthropic, Gemini, or Perplexity. That provider bills you, not BackBrain. No subscription is sold on this site and BackBrain adds no markup.
Local choices
Use Ollama, LM Studio, or a compatible endpoint. Local-only mode refuses cloud model calls instead of quietly switching. This mode is a setting, not the default.
Fallback and refusal
You can list fallback models. If a provider refuses a normal step, BackBrain can retry with less text, or you can switch model. It does not bypass a site’s security check.
Privacy and repeat work
Passwords and one-time codes stay on the PC and are not written into transcripts. Credential screens are not sent to a cloud model. Other task text can go to a model you chose. Local-only mode blocks cloud model calls; it is a setting, not the default.
Repeat work may need fewer calls. It can still need live reasoning.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# A record you can check
Source: https://backbrain.in/blog/tamper-evident-audit-trail/

A record you can check
Updated 2026-10-03
A hash-chained record
Each audit entry links to the previous one, making later edits detectable. The audit record stays on the PC. It is tamper-evident, not a claim that editing is impossible.
A searchable transcript
History keeps the transcript with secrets removed. Search a run to review what was said and done.
What approval records mean
Approvals you gave, and the separate confirmation for deletes, are part of the record. A send or submit needs approval for that task; related later steps do not each require a new confirmation.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# Name files by what is inside them
Source: https://backbrain.in/blog/smart-file-organizer/

Name files by what is inside them
Updated 2026-10-03
BackBrain can read what a file contains, propose a name and a folder, and move it after you accept. It uses contents and metadata, and asks when unsure.
Preview before moves
Inspect the folder and read documents.
Use OCR for scanned pages when their text can be read.
Propose file names and folders based on contents.
Preview the moves and accept before applying them.
Organizing does not delete
Clean up or organize is never permission to delete. Delete needs a clear request and confirmation of the exact files.
Scheduled work
A schedule still waits for approval if a later step sends or deletes. You can stop the routine.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# PDFs as working files
Source: https://backbrain.in/blog/pdf-automation/

PDFs as working files
Updated 2026-10-03
BackBrain can merge, split, rotate, watermark, and fill PDFs, and extract text on your Windows PC. Scanned pages can be used when their text can be read.
Make the working file
Merge related PDFs.
Split or rotate pages.
Add a watermark to a file you have the right to alter.
Fill PDF forms from data you already have.
Extract readable text, including scans when possible.
Limits
Not every scanned form fills perfectly. Review the result. A password-protected PDF opens only with a password you stored or typed; BackBrain does not break encryption. Alter only files you have the right to change.
Delivery
A send through email or WhatsApp Desktop still waits for approval.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# A provider outage should not erase the task
Source: https://backbrain.in/blog/ai-provider-outage-resilience/

A provider outage should not erase the task
Updated 2026-10-03
A provider failure should not erase the task, but it can stop the next reasoning step. BackBrain can retry, try another model you configured, or wait and let you take over.
Retry and fallback
Fallback uses only a model you listed. Local-only mode does not quietly switch to the cloud.
Remembered steps have limits
A remembered path can continue only while the page still matches. If it changed, live reasoning is needed. Repeat memory is not a guarantee that the task can finish without further calls.
When a filter blocks a step
It may retry a normal step with less text. It does not bypass the site. You can switch model or take over manually.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# What BackBrain can do
Source: https://backbrain.in/use-cases/

What BackBrain can do
BackBrain finishes chores on your computer. These are the patterns people ask for most. They are not limited to one location.
Portals, without the tab marathon.
It gathers statements and walks a tax or government portal you already use. You review before anything is submitted. It is not a tax adviser.
An assistant for an accounting practice.
Collect client documents, file them by what they contain, and send a report on WhatsApp Desktop or email after approval.
Reports on WhatsApp Desktop.
Open the desktop app, attach a file, and send after you approve.
Bank statements, with proof.
Download from the bank’s own website and do not call it done until the file is on disk.
Related use cases
Tax and government portals
Explore this task on your Windows PC.
Accounting practices
Explore this task on your Windows PC.
WhatsApp Desktop reports
Explore this task on your Windows PC.
Bank statements
Explore this task on your Windows PC.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# How BackBrain compares
Source: https://backbrain.in/compare/

How BackBrain compares
On your PC vs a cloud sandbox
A cloud agent often cannot reach your desktop apps and folders. BackBrain runs on your Windows PC.
Chatbots talk. BackBrain does the task.
A chatbot can explain the steps. BackBrain can carry them out, with approval on sensitive steps.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# Frequently asked questions
Source: https://backbrain.in/faq/

Frequently asked questions
BackBrain is an AI operator for Windows. It performs tasks on your PC. An Android companion is optional. Passwords stay in a vault on the PC.
Questions and answers
What is BackBrain? An on-device operator for Windows. It uses your browser, apps, files, email, and WhatsApp Desktop. It is not limited to tax or banking. The Android app pairs to the PC. It does not do every desktop job by itself.
How is it different from a chatbot? A chatbot writes an answer. BackBrain can carry out the steps and check a file landed on disk. Sends and submits wait for your approval.
Are passwords safe? They sit in a Windows-encrypted vault on the PC, are used at sign-in, and are not copied into transcripts. You can also type a password for one task only, then it is cleared. Credential screens are not sent to a cloud model.
Does it send my data to the cloud? Passwords and one-time codes stay on the PC. If you use a cloud model, the text it needs to decide the next step can go to that model, with secrets removed. Local-only mode blocks cloud model calls. Files are not uploaded to a BackBrain server.
What does it cost? Free during private beta. No subscription is sold on this site. If you bring a cloud model key, that provider bills you, not BackBrain.
Which devices? Windows for the operator. Android for an optional companion. Not Mac, iPhone, or Linux in this version.
Tax portals? It can walk a portal you already use and wait for your approval before submit. It does not give tax advice and does not pick your tax position.
Bank statement? It can sign in on the bank’s own site, download, and wait until the file is on disk, then forward after you approve. A phone code is not guaranteed to arrive automatically.
Will it act without permission? Reading can be quiet if you allowed that. Send, pay, buy, and submit need your approval for the task. Delete always needs a separate confirm of the exact files.
How do I get it? Email hello@backbrain.in or reserve a spot on the homepage.
Provider down? It can retry, try another model you configured, or wait and let you take over. Websites still need the internet. Repeat tasks may reuse memory. They do not guarantee call-free execution.
Log out? It does not sign you out unless you ask. The site can still expire the session.
One-time code? You can type it or paste it. Linked email may supply one. Automatic Android notification relay is not guaranteed in this beta. Codes are not stored in the transcript.
Teach it? You can demonstrate, give a standing note, or correct a run. A demonstration should be saved only when you say save. Production auto-run of a taught skill is not the claim. Secrets you type are not what gets stored.
What does it refuse? Delete without clear words plus a confirm. Send, submit, pay, or share without approval. A purchase still needs a mandate you set (who, how much, until when) as well as approval. It does not use a code outside the task you approved. It cannot approve its own delete.
How does it learn? From steps that actually worked, saved on the PC. A changed page goes back to live reasoning. You can ask it to forget, and it should show you the memory first.
Can I see what it did? Yes. History keeps the transcript, secrets removed. The audit record is hash-chained on the PC.
If a site redesigns? It reads the live page. A remembered path that no longer matches is handed back to live reasoning.
Which models? Your key for Azure OpenAI, OpenAI, Anthropic, Gemini, or Perplexity, or a local model through Ollama, LM Studio, or a compatible endpoint. Fallback lists are optional. Local-only mode does not quietly switch to the cloud.
Does it delete files? Only if you clearly say delete, remove, or trash, and then confirm the list. Organize and clean-up do not delete.
Is it a chatbot? No. The chat is how you steer it. The product is the work on your PC.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# Learn how BackBrain works
Source: https://backbrain.in/learn/

Learn how BackBrain works
Short guides to the operator on your PC. They describe this private beta, not a future version.
Glossary
Plain definitions.
FAQ
Answers about the Windows private beta.
What is a local AI agent
Software that acts in your browser, apps, and files. Local does not mean offline.
Portal work is not tax advice
What an on-device agent can and cannot do on a tax or government portal.
Privacy
Passwords stay on the PC. Understand what can reach a cloud model.
Recurring paperwork
Statements, files, and approved sends. Recurring work is not unsupervised.
Memory of a portal
Reuse steps that worked; read the live page again when it changes.
Three levels of control
Quiet reading, task-level approval, and a separate confirmation for delete.
Staying signed in
BackBrain does not log you out unless you ask. The site can still time out.
Show it once
Observe, summarize, and save only when you say save.
One-time codes
Type, paste, or use linked email. Phone relay is not guaranteed.
Cloud or local model
Choose your key or a local endpoint. Local-only mode blocks cloud calls.
Audit record
A hash-chained record and searchable transcript on the PC.
Filing a messy folder
Name files by contents and review moves. Organizing does not delete.
PDFs
Merge, split, rotate, watermark, fill, and extract readable text.
When a model provider fails
Retry, use a configured fallback, or wait for manual takeover.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# Blog
Source: https://backbrain.in/blog/

Blog
What is a local AI agent
Software that acts in your browser, apps, and files. Local does not mean offline.
Portal work is not tax advice
What an on-device agent can and cannot do on a tax or government portal.
Privacy
Passwords stay on the PC. Understand what can reach a cloud model.
Recurring paperwork
Statements, files, and approved sends. Recurring work is not unsupervised.
Memory of a portal
Reuse steps that worked; read the live page again when it changes.
Three levels of control
Quiet reading, task-level approval, and a separate confirmation for delete.
Staying signed in
BackBrain does not log you out unless you ask. The site can still time out.
Show it once
Observe, summarize, and save only when you say save.
One-time codes
Type, paste, or use linked email. Phone relay is not guaranteed.
Cloud or local model
Choose your key or a local endpoint. Local-only mode blocks cloud calls.
Audit record
A hash-chained record and searchable transcript on the PC.
Filing a messy folder
Name files by contents and review moves. Organizing does not delete.
PDFs
Merge, split, rotate, watermark, fill, and extract readable text.
When a model provider fails
Retry, use a configured fallback, or wait for manual takeover.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in

# Glossary
Source: https://backbrain.in/learn/glossary/

Glossary
Local AI agent
Software on your computer that does tasks in your browser, apps, and files. Passwords stay on the device. If you choose a cloud model, secrets are not part of what is sent.
Human-in-the-loop
You approve sensitive work. Delete always asks again.
Autonomy tiers
Everyday reading and navigation can run without a stop when you have allowed that. Send, pay, buy, and submit need your approval for that task. Related later steps do not each ask again. Delete requires a clear delete, remove, or trash request and a separate confirmation of the exact files. Organizing never means deleting. The model cannot approve its own delete.
OTP relay
You can type or paste a code on the PC, or use linked Gmail or Outlook when that path is available. Automatic Android notification relay is not guaranteed in this private beta. If a code is missing, the task waits. Codes are not written into transcripts.
Compiled procedure
It remembers steps whose results were real, such as a file landing on disk. The next similar run may reuse those steps. If a button moved or the page changed, it reads the live page again. Memory stays on the PC, not in the password store or as a procedure sent to a BackBrain server. Reasoning calls may still be needed.
Watch-and-learn
You demonstrate. It summarizes. It saves when you say save. It does not store secret text you typed.
MCP
An open way to attach tools. BackBrain can use MCP servers you add. You can add MCP servers you choose.
Helper agents
Extra reasoning inside a run. They do not bypass the vault or the approval rules.
Routine
A task you schedule. It still stops for approval on sensitive steps and can be switched off.
Sentinel trigger
A rule you set, such as a new file, that may start a task. Sensitive steps still need approval.
Vault
The Windows-encrypted password store on your PC, used at sign-in. Passwords are not written into transcripts.
Session-only credentials
A password held in memory for one task, then cleared.
Redaction
Removing secrets from transcripts and from text sent to a chosen cloud model.
Local-only mode
A setting that blocks cloud model calls instead of quietly falling back to the cloud.
Audit ledger
A hash-chained record on your PC. Links between entries make later edits detectable.
Purchase mandate
A limit you set before a purchase: merchant, maximum amount, and expiry. Approval is also required.
Tool pinning
If a connector’s tools change after approval, they wait for your review again.
Kill-switch
A control that stops background work.
Prompt injection
Untrusted page text is not allowed to skip approval or delete.
Get BackBrain to do this for you
BackBrain is free during private beta for Windows, with an optional Android companion. Reserve a spot on the homepage or email hello@backbrain.in.
Reserve Early Access hello@backbrain.in