Documents stay on the customer's network. wsec-dms-agent detects each new file via inotify, sends it to the local LLM for classification and stores results in an embedded database. Zero traffic to the cloud, GDPR-by-design.