Loading the catalogue…
Desktop apps · Menlo Research Pte. Ltd. · SG
Jan
EU sovereignOpen sourceAGPL-3.0
STAV REVIEW · LAST REVIEWED 06/14/2026
“The gold standard for Sovereign on-device Inference: everything stays on your machine, but supply-chain hygiene and AGPL obligations need governance before enterprise rollout.”
Good for
- Teams requiring fully air-gapped or on-premises LLM Inference with no vendor cloud dependency
- Developers who want a local OpenAI-compatible API at localhost:1337 to plug existing tooling into without rerouting traffic
- Regulated or data-sensitive organisations where Sovereign data residency is non-negotiable and vendor CLOUD Act exposure must be eliminated
- Engineers on Linux wanting AMD ROCm/HIP hardware support for local Inference (added v0.8.2)
- Open-source-first teams comfortable with AGPL-3.0 who want an actively maintained desktop LLM client with a ~10-day release cadence
Watch out for
- AGPL-3.0 strong copyleft: any internal modification of Jan deployed as a networked service legally requires source disclosure — a formal licence review is mandatory before any modification programme begins
- Release binaries remain unsigned and no SBOM is published; a signing-enforcement PR (#8037) is in progress but not yet shipped as of v0.8.2, meaning supply-chain verification is still a gap
- Configuring a remote API provider (OpenAI, Anthropic, Groq, etc.) routes prompts directly to that provider under its own policy — each configuration is a separate governance surface that Jan's privacy guarantees do not cover
- No SSO, centralised audit logging, SOC 2, ISO 27001, DPA, or SLA: fleet-level oversight must be built at the endpoint or network layer, not within the application
Editorial assessment, not legal advice. Stav's risk ratings, scores, and verdicts are our own analysis of publicly available information and may be incomplete or out of date. Verify independently before making compliance or procurement decisions.
MODEL REQUIREMENTS
What Jan needs from a model.
Required
- Streaming
Recommended
- Long context (≥128k)
- Open weights
Known issues7 open
Public security, privacy and governance advisories that are still open. Each row carries a source link — these are factual claims, not editorial judgements.
2026-06-30
lowUpstream change on jan: github_release 'v0.8.2' → 'v0.8.3', github_last_push '2026-06-23T01:53:42Z' → '2026-06-30T06:14:16Z'
other · open
Source ↗2026-06-23
lowUpstream change on jan: github_last_push '2026-06-16T05:19:26Z' → '2026-06-23T01:53:42Z'
other · open
Source ↗2026-06-16
lowUpstream change on jan: github_last_push '2026-06-02T03:00:21Z' → '2026-06-16T05:19:26Z'
other · open
Source ↗2026-06-02
lowUpstream change on jan: github_release 'v0.7.9' → 'v0.8.2', github_last_push '2026-05-19T04:28:54Z' → '2026-06-02T03:00:21Z'
other · open
Source ↗2026-05-19
lowUpstream change on jan: github_last_push '2026-05-12T05:30:15Z' → '2026-05-19T04:28:54Z'
other · open
Source ↗