Vault Sort 4.4.0 introduces Guardian, a Mac-only feature that scans chosen folders for sensitive files — identity documents, financial records, credentials, and medical or legal files — entirely on-device with zero network calls. Nothing is uploaded; OCR and analysis run locally, and the report exists only in memory, never touching disk. Guardian is read-only: it never moves, changes, or deletes files. It flags likely sensitive items by detecting number patterns, filenames, and on-device AI content reading, then ranks findings by severity and highlights any in cloud-synced folders.

Users select folders (Desktop, Downloads, Documents), run the scan, and can encrypt flagged files in one click using Touch ID or a YubiKey. The privacy architecture includes no backend, no API key, no account, and no persistent map of sensitive data.

Guardian ships as a free update for existing Vault Sort users; new buyers pay $24.99 one-time for a lifetime license. The 4.4.0 release also adds on-device OCR for Smart Categorize, smarter photo and video grouping, a redesigned Rule Builder, and content search in scheduled jobs.