Bring the AI to Your Data, Not Your Data to the Cloud

Episode Summary

Speaking in November 2024, Mark Heynen, chief product officer and co-founder of Knapsack, argues that the data problem in enterprise AI is architectural rather than procedural. Regulated firms found the best way to use large language models was to upload their data into an LLM cloud, and their regulatory status would not let them, so the useful move is to reverse the direction: bring the AI to the data instead of the data to the AI. He says there is already enough compute on a desktop or a smartphone to run smaller language models locally, which makes that reversal practical rather than theoretical. From there he treats compliance as a by-product, because software that runs on your own device inherits the security policies already on it. He is equally direct about what he thinks goes wrong: one of the biggest risks he sees is a company pulled into an expensive deployment whose return nobody can demonstrate.

Key takeaways

  • The specific bind he watched those firms get into is the one the whole episode answers. The best way to use the technology was to upload a lot of data into an LLM cloud, whether ChatGPT or Gemini or Claude, and their regulatory status simply did not allow it

  • His second reason for the bind is uncertainty rather than rules, and he says it has not resolved. It was unclear and still remains unclear to most people what happens to data once it is uploaded: there is always the risk of it being used for training even when people say they will not, and the risk of leakage

  • The number that made it urgent for them was about behavior, not about technology. He said in November 2024 that a Microsoft survey he names as the Work Trend Survey put 78 percent of people using consumer tools at work, from a pool of thirty-one thousand respondents across thirty-one countries

  • What he draws from that number is a mismatch, not an adoption win. The majority of those people are not using a tool fit for purpose, and in finance and healthcare he says they are putting their jobs at risk by doing it

  • He is candid that the rule loses to the tool, which is why he thinks a policy is not enough. People are often not allowed to upload data to a tool under their own AI policies, and the temptation is so great considering how powerful the technology is

  • A solution already existed when he started, and his objection to it was the price. He said in November 2024 that Microsoft offered it through OpenAI Azure service agreements at about one million dollars a year on average, so there was an expensive answer but not a widely accessible one

  • His diagnosis is the sentence the rest of the episode hangs on, and it is about architecture rather than policy. We should not be bringing the data to the AI, we should be bringing the AI to the data, because there is no reason people should round trip their data somewhere to get insights on it back

  • What makes that practical rather than theoretical is where the compute already is. There is plenty of compute on the edge, on your desktop and smartphone, smaller language models are driving more efficiency, and he says that talking to Qualcomm and looking at projections pointed to more GPU capability arriving on phones and laptops

  • The product shape follows from the diagnosis, and it starts small on purpose. You download an app to your computer and it runs across your data; cloud data still works because you download and embed it locally; the enterprise version is a server behind the firewall, without having to trust anyone, including us

  • He extends that to a claim about his own company, which is the strongest version of the argument. In their architecture they do not have access to the data at all, and he takes the principle from crypto: there is no reason why the software should have access to the value

  • Asked to lay out the landscape, he answers chronologically rather than by category. Large language models came first and cloud services made them accessible; small language models followed through advances in quantization and pruning, and he credits those same advances for the Apple Intelligence announcements

  • On agents he is the opposite of bullish, and he puts a number on it. He said in November 2024 that agents were maybe two or three years out from being very useful for mass market, because running autonomously without a human in the loop raises questions about accountability and about confidence that the job gets done well

  • What he offers instead is a smaller step he thinks is available now. Automations are the same capability with a human kept in the loop: the computer reads the data, produces insights and can even take some actions, and a person reviews before anything goes out

  • His worked example is a physician doing a pre-authorization, and the claim he makes for it is modest. The work runs and is produced automatically, the physician reviews it and sends it off, and he says it could hopefully shave a day off the work week

  • Asked which model the product runs, he says open source, and gives a commercial reason rather than a technical one. Fine-tuning open source models is the most cost-effective way to get to market, and he wants to be the prime beneficiary of the innovation happening in that community

  • He names the obligations rather than gesturing at them. Confidentiality commitments to partners, certifications including CCPA, GDPR, HIPAA and SOC 2, and in finance a books and records requirement under the SEC and the FTC that means everything has to be logged

  • On compliance his argument is that local execution makes it a by-product rather than a project. Running everything locally on your device leaves you in full control of where the data goes, and because the software adopts the security policies already on the device, you are immediately compliant with the obligations you already carry

  • The risk he puts first is commercial, not technical, and he names who is selling it. One of the biggest risks companies are grappling with, he says, is being pulled into a high-cost deployment that does not have ROI, and he points at large deployments being pitched by Accenture and Microsoft

  • His evidence for that is one report and he hedges the attribution twice. He said in November 2024 that a Morgan Stanley report carried an interview with a pharmaceutical executive, he thinks the CTO of Bristol Myers Squibb, who said a Microsoft deployment they had paid for delivered extremely limited ROI and produced PowerPoints on the level of a middle schooler

  • Asked what instant private automations actually means, he answers it as three separate claims. Instant is that it works as soon as you connect it to your data; private is that the embedding and the RAG pipeline both run on the device; and the application itself runs there, so there are no files hosted with them

  • His argument for automations over chat is about friction rather than capability. The chat box is the dominant UI and a genuinely accessible one, but you have to know how to write something and know what to write, and that is a block on using a technology that is available whenever your computer is running

  • His closing ask is narrower than it sounds and it is aimed at permission. We are at the very beginning of this AI world, there is a way to use AI at work without violating whatever internal or external agreements you have, and he says we should work together to find out how

About Mark Heynen

Mark Heynen is chief product officer and co-founder of Knapsack, which builds automations that run on your own device rather than in a vendor cloud. The host puts its tagline to him on this episode as instant private automations, and he takes the three words apart one at a time. He co-founded PayJoy in 2015, where he worked on access to smartphones and smartphone finance, and before that he worked on Android at Google. He describes access problems as his bread and butter, and traces Knapsack to a problem he and his co-founder each ran into separately: regulated finance firms that could see what large language models could do for them and were not permitted to upload the data those models needed. Everything he says here about Knapsack, its architecture and its certifications describes the company as it was in November 2024, when the product was in private beta.

 

In this episode

00:28 Welcome, and who Mark Heynen is
01:04 The question: what inspired Knapsack
01:08 A lived experience both founders had
01:47 The bind: upload the data, or comply
02:11 What happens to data once it is uploaded
02:34 What CISOs told him about AI and data security
02:54 The 78 percent using consumer tools at work
03:15 Thirty-one thousand respondents, and a tool not fit for purpose
03:31 The policy loses to the temptation
03:48 A million dollars a year for the expensive answer
04:15 The diagnosis: bring the AI to the data
04:32 Compute on the edge, and what the projections showed
04:52 Download an app, then upgrade to a server behind the firewall
05:22 Software that has no access to the value
06:19 The question: how the pieces fit together
06:49 Large models, cloud services, then quantization and pruning
07:13 Small models catch up, and Apple Intelligence
07:37 Agents, accountability, and the step before them
08:13 Automations with a human in the loop
08:30 The physician who reviews and sends
08:57 The question: which model does it run
09:17 Fine-tuning open source, and why
09:57 The question: what else does compliance cover
11:02 The compliance problem stated plainly
11:28 CCPA, GDPR, HIPAA and SOC 2
11:51 Books and records, and running it locally
12:18 Inheriting the policies already on the device
12:53 The question: what other risks
12:58 A high-cost deployment with no ROI
13:24 The Morgan Stanley report, and the PowerPoints
14:09 The setup cost before any value appears
14:33 The question: what instant private automations means
14:45 What instant, private and automations each mean
15:40 The friction in the chat box
16:49 Monitoring on a schedule, and what it needs from you
17:22 The question: what to read and try
17:44 The white paper, and knapsack.ai
19:38 The question: the closing takeaway
19:44 Using AI at work without breaking your agreements

In Mark’s words

“the majority of those people are actually not using a tool fit for purpose”

Mark Heynen   (03:15)

“We should not be bringing the data to the AI. We should be bringing the AI to the data.”

Mark Heynen   (04:15)

“There’s no reason why the software should have access to the value.”

Mark Heynen   (05:22)

“there’s probably a step before we get to agents, which is what we call automations”

Mark Heynen   (07:37)

“having everything run locally on your device, so you have full control of the data and where it goes”

Mark Heynen   (11:51)

“I think there’s an inherent friction in the chat box.”

Mark Heynen   (15:40)

“there is a way to actually use AI at work without violating whatever internal agreements or external agreements you have”

Mark Heynen   (19:44)

 

Resources

Named on air

  • PayJoy: The company he co-founded in 2015, named at 01:14 and again at 03:48 as where he worked on access to smartphones and smartphone finance

  • Android at Google: Named at 03:48 as the earlier access problem he worked on, which he describes as fundamentally access to smartphone technology

  • Lambda Labs: Where his co-founder was working with data and LLMs before they started the company, named at 01:14

  • Qualcomm: Named at 04:32, as the company they talked to while looking at projections for GPU capability on smartphones and laptops

  • Groq: Named at 15:13 as where the optional cloud model runs when ephemeral computing is used

  • LM Studio: Named at 18:06 as a local app he suggests trying to understand how local models work, with the caveat that it does not generally connect to your data

  • The Microsoft Work Trend Survey: The name he gives at 02:54 for the source of the 78 percent figure, from a pool of thirty-one thousand respondents across thirty-one countries

  • A Verizon data breach report: His attribution at 10:45 for the figure that 36 percent of breaches stem from user error with software tools

Ideas and terms discussed

  • Bringing the AI to the data: His own phrase at 04:15 for reversing the usual direction, so the model travels to the data instead of the data traveling to the model

  • The edge: His word at 04:32 for the compute already sitting on a desktop or a smartphone, as opposed to a cloud server

  • Small language models: Models made small enough to run on a device, which he says reached similar functionality to large ones through quantization and pruning

  • Automations: His term at 07:37 for the step before agents: the same capability with a person reviewing before anything goes out

  • Ephemeral computing: The optional cloud path he describes at 15:13, where an answer is produced and not saved

  • RAG pipeline: Named at 14:50 as something they built themselves, to select the right data on the device for the model to work on

Related AI Realized episodes and events

 

Frequently Asked Questions

 
 
 
 
 
 
 
 
 
 
 
Previous
Previous

An AI Committee Needs Every Department and Real Authority

Next
Next

Own Your Own Intelligence Before Your Vendor Learns It