WINDOWS DESKTOP APP

Intern reads a document and tells you what to call it.

Drop in PDFs, Word files, spreadsheets, email and scans. Intern proposes a filename, shows the passage that proves it, and renames nothing until you approve.

Download for Windows

Fetching the latest release…

New here? Read the guide

  • PLATFORM Windows 10 or 11, x86-64
  • INSTALL Per user — no administrator rights
  • ACCOUNT None. No sign-in, ever.
A messy filename becomes a descriptive one The file "2026-12-29 - notice.pdf" becomes "2026-12-29 Notice of Termination - John Smith.pdf", with the date, document type and party marked as separate parts of the name. BEFORE AFTER 2026-12-29 - notice.pdf 2026-12-29 Notice of Termination - John Smith .pdf DATE DOCUMENT TYPE PARTY A messy filename becomes a descriptive one The file "2026-12-29 - notice.pdf" becomes "2026-12-29 Notice of Termination - John Smith.pdf", with the date, document type and party marked as separate parts of the name. BEFORE 2026-12-29 - notice.pdf AFTER 2026-12-29 Notice of Termination - John Smith .pdf DATE TYPE PARTY
Every part of the proposed name is quoted from the document itself. If a part cannot be quoted, the document goes to review instead.
  • 2026-04-09 - Statement of Work.pdf 2026-04-01 Statement of Work between Ridgeline Cartography LLC and Contoso Worldwide, Inc.pdf
  • 2025-02-14.pdf 2025-02-14 Employment Agreement between Northstar Lantern Works LLC and Mira Vale.pdf

PIPELINE

How it works

Three steps, and the last one is yours.

  1. 01Documents in

    Drag them onto the window, or point Intern at a folder to watch.

    • PDF
    • WORD
    • EXCEL
    • EMAIL
    • TEXT
    • SCANS

  2. 02Read on your machine

    The document's own text first, and OCR only when a page has none.

    One AI model does the rest, on your computer, unless you turn on a hosted model.

  3. 03You approve

    Every proposal carries the passages that support it, and a confidence.

    Nothing on disk is renamed until you say so.

  • If it can't be proved, it isn't guessed Anything Intern cannot back up with evidence from the document goes to a review list.
  • Every rename can be undone Approve one document at a time, or apply all the ready ones at once.
  • Already filed? It says so A document whose content Intern has filed before is flagged as a duplicate rather than renamed again.

PRIVACY

Private by design

Intern does its work on your computer, start to finish, unless you turn on a hosted model.

Document text, extracted pages, OCR output, and the prompts sent to the model never leave the machine, unless you turn on a hosted model (opt-in, your own API key).

  • NO TELEMETRY
  • NO CLOUD FALLBACK
  • NO REMOTE PROCESSING UNLESS YOU TURN ON A HOSTED MODEL
Model file
Downloaded once, when you ask for it.
Update check
When Intern starts, every 6 hours while it runs, and when you press Check for updates. The automatic check can be switched off in Settings. Sends nothing about your documents.
Hosted model, if you choose one
Off unless you turn it on. Then each document's condensed text goes to the service you name, under your own API key.
Microsoft sign-in and Graph, provisioned builds only
login.microsoftonline.com, to sign in and keep the sign-in current, and graph.microsoft.com, for account and file metadata that verifies who uploaded a document to a team Inbox; never its content. Not in the build published here.

That is every network request Intern makes, and there is no telemetry. A default install sends only the first two, and neither carries anything about your documents.

OneDrive and SharePoint still work.

Through the Microsoft sync client already on your machine — not a cloud API, and not an account.

How that works

What crosses the boundary of your machine Your documents, text extraction, OCR and the AI model all sit inside your machine. Two arrows cross the boundary: the one-time model file download, and the update check, which runs at startup and every 6 hours unless you switch it off. Neither carries anything about your documents. A hosted model, only if you turn one on, is the one way document text leaves. THE INTERNET MODEL FILE once, when you ask UPDATE CHECK at start, every 6 hours YOUR MACHINE Your documents Text, then OCR The AI model A proposed name nothing else, unless you choose a hosted model

PROVENANCE

Before you install

Windows will call this an unrecognized app. Here is why, and what to do about it.

The installer is not Authenticode signed yet.

This project has no code-signing certificate, so SmartScreen shows “Windows protected your PC”. Choose More info, then Run anyway.

On a PC where Smart App Control is on (enforcement mode), Windows blocks the installer outright and offers no Run anyway. Intern cannot be installed there until it is signed.

You should not take an unrecognized-app warning lightly. Verify the download instead of trusting it.

Every published installer carries a keyless Sigstore build-provenance attestation naming the repository, workflow, and commit that produced those exact bytes. 

gh attestation verify Intern_x64-setup.exe --repo z-brenner/intern --signer-workflow z-brenner/intern/.github/workflows/release.yml
WHAT EACH ONE ACTUALLY PROVES
SHA256SUMS.txt Attestation
Catches a corrupted download YES YES
Proves where the file came from NO YES

SHA256SUMS.txt sits on the same page as the installer, so it proves nothing about origin. The attestation is the part that does.

SETUP

First run

The installer deliberately leaves out one thing: the model.

1.19 GiB the AI model file, downloaded once on first launch
  • Resumable If the connection drops, reopen Intern and it continues where it stopped.
  • Verified before use The file becomes active only after its exact length and SHA-256 match the manifest built into the installer.
  • Already have it? Choose existing model files points Intern at a copy from another machine and skips the download.

Nothing else needs installing. PDF text extraction, OCR, and inference all ship inside the app.

UPDATES

Updates, checked for you, installed by you

Intern checks for a newer release when it starts and every 6 hours while it runs.

The check asks GitHub for the release manifest and sends nothing about your documents: no filenames, no contents, no identifier. To stop it, untick Check for updates automatically in Settings; Check for updates still works whenever you press it.

A found update is never installed without your click, and only a build signed with this project's key is accepted. Anything else is refused.

The guide covers everything you will actually run into: installing, first run, OneDrive and SharePoint, watched folders, working as a team, and troubleshooting.

Open the guide