Download

What you need

• macOS 13 or later, on Apple silicon or Intel. The build is signed with an Apple Developer ID, notarized by Apple and stapled, for both architectures.
• A Google account, if you want mail in the workspace. You press Sign in with Google; you never type an email address or a password into Connek.
• ClamAV, if you want to open or send an attachment on a Mac — one install, and until it is there attachments are held in quarantine rather than delivered unscanned. Windows already has the malware scanner Connek uses.
• Claude Code or Codex CLI already installed, if you want local AI. Connek bundles neither and installs neither — it detects what is on your machine and verifies it before it will use it.
• The GitHub command-line tool, signed in to your own account, if you want a private per-client repository as backup. This is optional and can be set up later.

How you get it

Subscribing opens Stripe Checkout. When the subscription exists, a licence key is generated and recorded against it, and you can read that key on the account page at any time by asking for a sign-in link.

With an active subscription, the account page is where the installer comes from: sign in with the link mailed to you, choose Apple silicon or Intel, and the page starts the download and shows the version and its SHA-256 so you can check what arrived. Each download link lasts five minutes and works once. Nothing is sent to you by email — the download starts from the account page.

Start a subscription

Platforms

macOS is the only platform with a distributed build, and that build is Developer ID signed, notarized and stapled for Apple silicon and Intel. Windows is genuinely supported in the codebase — secret storage, the installer script, the full unit suite and a packaged Windows application all run in continuous integration on every change — but no Windows build is signed or distributed, so there is no Windows installer to download, and local AI command-line execution is macOS-only. There is no Linux build.

What the first run looks like

• You name your company or team. That name becomes the encrypted workspace identity.
• You choose which folders the application may look in. Choosing a parent grants it the right to read that folder's name list and modification times — not file contents, and not the right to create anything.
• You connect Gmail, and it downloads a bounded first sync of your recent mail into the encrypted local database.
• You review the clients it proposes from your own mail and folder names, with the reasoning shown for each. Only the ones you tick become clients; the rest stay pending until you say otherwise.
• Everything after that — discovery, mapping decisions, drafts, approvals, sends, deletions and backup outcomes — is written to an audit trail you can read.