How to Run Perplexity Computer Fully Local on Mac: What Changed

You will learn: who the release is for, how fully local differs from Hybrid Compute, which choices may involve the cloud, and what to verify before using sensitive files. This is a news explainer of the official release, not a firsthand setup walkthrough.

What changed on October 20

Perplexity previously gave Computer access to local files and native Mac apps through Personal Computer. Its later Hybrid Compute announcement paired cloud reasoning with local processing. The newly announced fully local mode moves the model, agent harness and task execution onto a supported Apple silicon Mac. Perplexity says the local mode starts planning, reasoning and file processing on the Mac rather than beginning in the cloud.

That distinction matters more than the word “local” by itself. A Mac app can access local files while still using a cloud model. Perplexity's latest claim is narrower and more specific: the model and task execution can run on the Mac in the selected mode, while some other actions can be deliberately escalated to cloud services. The announcement says code and tools run in isolated sandboxes with controlled access to files and connected apps. Xtrusio has not verified those controls in an installed app.

The table summarizes Perplexity's published descriptions, not an observed network trace. It gives a useful question for a team handling confidential material: what does this particular task need to read, which apps will it touch, and will any step ask to leave the device?

Eligibility and setup, as Perplexity describes them

The official announcement lists Pro, Max and Enterprise subscribers on supported Apple silicon Macs. It recommends 36 GB or more of memory for local Computer. That is a recommendation, not a guarantee that any specific task will fit or complete. The announced local model choices are Qwen 3.6 and PPLX Pro, which Perplexity describes as a post-trained version of Qwen.

Perplexity gives three setup actions: use the latest Mac app, follow its in-app process to set up one of the local models, and select fully local for the task. The announcement does not provide an independent benchmark by Mac model, an exhaustive compatibility list or proof that every connected workflow remains offline. We have not performed those steps on this Windows computer, so the wording here is the company's documentation, not our hands-on result.

For a cautious first use, decide in advance whether the task really needs current web information or a connected app. If it only needs files already on the Mac, the fully local mode is the one Perplexity describes for keeping planning and file work on device. If it needs cloud reasoning as part of the job, Perplexity describes Hybrid Compute as a different choice. Review any app or file permission request against the task's actual scope rather than giving broad access because the mode is called local.

What a team should verify before sensitive work

An official launch post tells readers what the product is intended to do; it does not substitute for their own security review. A team can use a harmless sample document to confirm that the Mac, plan and local model are eligible, that the app visibly shows the selected mode, that the requested file and app permissions match the job, and that any proposed cloud escalation is understood before approval. Those are recommended checks, not tests Xtrusio has already run.

The same distinction applies to the article's examples. Perplexity describes portfolio review, client-proposal work and daily-priority planning with local files and apps. Those are product examples, not evidence that a particular organization has approved its data handling. The most useful reading of this release is the mode boundary: fully local starts on device; Hybrid Compute includes cloud reasoning; an authorized escalation can change a fully local task's data path.

For brands using AI systems in customer work, this is another reason to record the source and boundary of an AI-produced answer. Our AI-agent security coverage examines why tool permissions matter, while the Claude unintended-actions report separates an agent's observed behavior from what a person intended to authorize. Neither is a test of Perplexity Computer.

Sources

• Perplexity, “Perplexity Computer now runs fully local on Mac,” 20 October 2026. Release scope, modes, eligibility, memory recommendation, models, app permissions and authorized cloud escalation. Checked 21 October 2026.
• Perplexity, “Introducing Hybrid Compute on Mac,” 1 September 2026. Earlier mode's cloud and local split. Checked 21 October 2026.