Download
Pick your platform. Every file below is published with its SHA-256 so you can check that what landed on your disk is what we put on the server — and with the exact warning your operating system will show you, because these builds are not yet signed with a company certificate.
You will also need Ollama, installed separately and free of charge, and one model that supports tool calling — the assistant edits your document by calling tools, so a model without them cannot change anything on the page. The five editors work with no model at all.
The files
Not every platform is on the same version today. The newest build is 1.1.5, and any artifact still on an older number is marked on its own button. It is also written up on the known limitations page, rather than left for you to discover.
Two builds. Check the Apple menu → About This Mac if you are not sure which processor you have.
M1, M2, M3, M4 and later — most Macs sold since late 2020
Download 1.1.5 · 161.7 MBCIA-NICKED-Office-1.1.5-arm64.dmg
Open the disk image and drag the application into Applications.
Check it
shasum -a 256 CIA-NICKED-Office-1.1.5-arm64.dmgMacs with an Intel processor — most Macs sold before late 2020
Download 1.1.2 · 158.4 MBCIA-NICKED-Office-1.1.2-x64.dmg
Open the disk image and drag the application into Applications.
Check it
shasum -a 256 CIA-NICKED-Office-1.1.2-x64.dmgOne installer, for 64-bit Windows 10 and 11.
Windows 10 and 11 on a 64-bit processor
Download 1.1.5 · 132.7 MBCIA-NICKED-Office-1.1.5-x64.exe
Run the installer. Windows will warn you first — see below.
Check it
certutil -hashfile CIA-NICKED-Office-1.1.5-x64.exe SHA256Three shapes of the same build. The AppImage installs nothing and is the quickest way to try it.
any recent distribution, no installation needed
Download 1.1.5 · 153.1 MBCIA-NICKED-Office-1.1.5-x86_64.AppImage
Mark it executable with chmod +x and run it. Nothing is installed system-wide.
Check it
sha256sum CIA-NICKED-Office-1.1.5-x86_64.AppImageDebian, Ubuntu and derivatives
Download 1.1.5 · 131.1 MBcia-nicked-office_1.1.5_amd64.deb
sudo apt install ./cia-nicked-office_1.1.5_amd64.deb
Check it
sha256sum cia-nicked-office_1.1.5_amd64.debFedora, RHEL and derivatives — not openSUSE, whose package names it does not match
Download 1.1.5 · 113.2 MBcia-nicked-office-1.1.5.x86_64.rpm
sudo dnf install ./cia-nicked-office-1.1.5.x86_64.rpm
Check it
sha256sum cia-nicked-office-1.1.5.x86_64.rpmRunning one of these organisation-wide rather than on your own machine? The terms differ, and so does what we can do for you — the organisation page says what a subscription covers.
SHA-256
Run the command on your copy and compare the 64 characters it prints with the row below. If they match, character for character, the file arrived intact and unaltered. If they do not, delete it and download it again — a download that changed in transit is the only kind worth the twenty seconds this takes.
Be clear about the limit, though. A checksum proves the file matches what this page says. It does not prove that the page and the file both came from us, which is the thing a signature would prove and does not yet exist here. If you followed a link to this page from somewhere else, that distinction is worth more than the checksum is.
Measured against the files themselves on 4 October 2026. The same list ships beside the installers as SHA256SUMS.txt, so you can check a whole directory in one command instead of comparing rows by eye:
shasum -a 256 -c SHA256SUMS.txt --ignore-missing| File | Version | Size | SHA-256 |
|---|---|---|---|
| CIA-NICKED-Office-1.1.5-arm64.dmg | 1.1.5 | 161.7 MB | 3328d3c57b9e11652c85bd3835fc9d0f264f1dd1241e773fea2a0b2ac9313602 |
| CIA-NICKED-Office-1.1.2-x64.dmg | 1.1.2 | 158.4 MB | e7c3accc511d392f7602efbb1d16ad7c4afe0be13ba81761d21cb593b12581e2 |
| CIA-NICKED-Office-1.1.5-x64.exe | 1.1.5 | 132.7 MB | 30c592745cb85ab6da304780ba75a647fdddfa72b886d0def1381fec9d075aa4 |
| CIA-NICKED-Office-1.1.5-x86_64.AppImage | 1.1.5 | 153.1 MB | 3b6126fa76ce5d71626041b3f5a96e984b360710d586181e4dfc5cc3926d88ce |
| cia-nicked-office_1.1.5_amd64.deb | 1.1.5 | 131.1 MB | fac3b7efdab51f6de336ee0a08d3c061654237429749084c1442e567e9849d01 |
| cia-nicked-office-1.1.5.x86_64.rpm | 1.1.5 | 113.2 MB | 8f6f4991d1fbf5495276506f219e4f662a1a3acf52f00eb9f50c17b1640fa724 |
shasum -a 256 <file>certutil -hashfile <file> SHA256sha256sum <file>First run
These builds are not signed with a company code-signing certificate, because we do not have one yet. That is the whole reason for the warnings below: macOS and Windows both treat an unsigned application as an unknown one, and say so in strong language. Signing and notarisation are the next thing on the bench — until they are done, the honest thing is to print the warning here rather than let it be your first surprise.
The first time you open it, macOS refuses outright and offers to bin it.
On macOS 15 and later the dialog is headed
"CIA NICKED Office" Not Opened
Apple could not verify "CIA NICKED Office" is free of malware that may harm your Mac or compromise your privacy.
It asks once. After that the application opens like any other.
If Open Anyway never appears — some people report this on Apple silicon Macs running macOS 15 or later — the last resort is Terminal. It removes the mark macOS puts on every downloaded file, so macOS stops checking this copy — which is why you should first check the file's SHA-256 against this page. Then run: xattr -dr com.apple.quarantine "/Applications/CIA NICKED Office.app"
If you download with Microsoft Edge, it may stop the file first, saying it isn't commonly downloaded. That is a count, not a finding: Edge trusts files many people have downloaded, and a new unsigned file starts at zero. Open Downloads, choose … next to the file, then Keep, Show more and Keep anyway.
SmartScreen stops the installer before it runs, behind a full-screen blue panel.
The panel is headed
Windows protected your PC
Microsoft Defender SmartScreen prevented an unrecognised app from starting. Running this app might put your PC at risk.
The installer then behaves normally. Windows asks again if you download a later version, because each file is judged on its own.
If the message says Smart App Control blocked it, there is no button past it, and the installed application would be blocked too. Your choices are to turn Smart App Control off in Windows Security, under App & browser control, which some versions of Windows 11 will not let you turn back on without reinstalling, or to wait for a signed build. On a work PC where Run anyway is missing, the block is your employer's policy: ask IT.
No warning dialog. From 1.1.5 the AppImage no longer needs the FUSE 2 library, so the
extra install step older builds needed on recent Ubuntu and Fedora has gone. The AppImage
still has to be marked executable before it will run
(chmod +x, or the Permissions tab in your file manager). The .deb
and .rpm packages are unsigned too, so a package manager configured to require a signature
will refuse them and tell you which key it wanted.
Both sentences above are quoted from the current releases, and both operating systems reword these dialogs from time to time. If what you see differs from what is printed here, the shape is the same: a refusal with no obvious way past it, and a second, quieter route that lets you proceed once you have said you meant to.
Phones and tablets
If you are reading this on a phone, everything above is for a desktop or laptop. A phone can download those files; it cannot open them. They are Windows, macOS and Linux applications, and Android installs only its own package format.
The reason is not that we have not got round to it. This suite is built on Electron, which has no Android or iOS target at all — there is no setting that produces a phone app from it. And the promise the product is named for is that the model runs on the machine your documents are on; a phone has neither the memory nor the thermal headroom to hold a useful model, and reaching for one on someone else's computer is the single thing this software exists not to do.
We would rather say that plainly than leave you tapping a button that cannot help. Whether a phone ever gets a companion to a desktop you already run is an open question, not a roadmap item — if it becomes one, it will appear on the development page with the same evidence as everything else.
After you install it
The application does not check for new versions, and no build contains the update feed one would need. That is deliberate, and it has a cost that belongs next to it rather than in a footnote: a fix reaches you only when you come back to this page and download a newer file. Nothing will tell you that one exists.
Which is what the email list is for. It is used for that, and for nothing else. Leave an address and you will hear when there is a version worth taking.
Before you go
Free for individuals, always — donations welcome, never required. Organisations pay a subscription; for organisations over 100 people it is required.
The software itself is licensed under Apache-2.0. These terms govern the service and support relationship — they are not a restriction on your right to the code.
Something wrong with a file, or a checksum that will not match? Write to hello@consultancyinaction.com.