Opposition research is a certainty, not a risk. Haven runs the audit first — privately, on your own machine — surfacing the old emails, documents, account-takeover signals, and message history that a researcher would go looking for. So you fix what's exposed before anyone else finds it.
Scanned on your Mac · Only redacted excerpts of hard cases ever leave · Read-only connect mode available
Most candidates have a decade of digital exposure they've never inventoried. Haven walks the same ground an opposition team would, in order, and tells you plainly what's sitting there.
Donor spreadsheets, internal strategy threads, personal financial details — sent years ago and never thought about since. Haven reads your archive locally and flags what carries risk.
A budget shared with a consultant who left. A folder still open to a former staffer. Haven finds files exposed externally across Drive and OneDrive, and lets you revoke access in a click.
Password-reset links that still work. Initial passwords sent in plaintext. Login codes that were never expired. Each one is a quiet door into an account you've stopped watching.
Years of iMessage with staff, donors, and family — the kind of thing taken out of context in a leak. Haven scans your message history entirely on your Mac, showing each finding inside its surrounding conversation so you judge it fairly.
The most dangerous finding isn't an old email — it's a silent forwarding rule. An attacker compromises an account, sets your inbox to auto-forward to a domain you don't own, then steps back. The breach is over; the exfiltration runs for years. Haven reads your mailbox settings — Gmail and Outlook — for exactly this: active external forwards, re-armable sleeper destinations, and filters quietly deleting your security alerts before you see them.
A campaign is the last place you want to hand someone a copy of everything sensitive in your digital life. Haven is built so that doesn't happen. The data-handling path runs on your machine. The rare hard case gets a bounded, redacted excerpt — never the full message.
SSNs, bank details, API keys, credentials, forwarding rules. Matched and validated locally — no model, no network.
Tax records, legal strategy, private financials, message content — judged by a small classifier that runs entirely on your machine.
Only the genuinely ambiguous cases. A short excerpt — with SSNs and keys already replaced by typed markers — crosses to a private GPU that keeps no logs, no copies, no history.
Every outbound call is listed in a Network Activity log you can hand to a security consultant: destination, what class of data, and a request ID — line by line. The privacy claim is something you can verify, not something you have to trust.
The detections that matter most when your old digital life is about to become public.
Active forwarding rules and destructive filters that signal a past account takeover — the thing you most want to rule out before you announce.
Query your own findings the way you'd ask a staffer: donors 2019–2021, what's exposed externally. Retrieval over what's on your device — no message bodies re-read.
Connect Google with genuinely narrower scopes — Haven can see to audit but cannot alter your mail or files. You remediate, on your terms.
Live password-reset links, plaintext passwords, SSNs and bank details in old attachments — found and laddered by how exposed they actually are.
iMessage scanned locally on your Mac, each finding shown in its surrounding conversation so nothing reads worse than it is. Nothing exported.
An activity log of every finding and every action, and a network log of every outbound call — exportable for the person running your security.
The deadline is the forcing function. The audit takes an afternoon. The exposure took ten years to accumulate.
Haven is in closed alpha with individuals preparing for public roles — people who, for plain reasons, cannot afford a data incident. If that's you or someone you advise, request access below.
macOS & Windows · Local-first · Read-only mode available · Only redacted excerpts of hard cases ever leave