Security and privacy · promise
Your engineering belongs to you.
PlannedPhase 2–3
The promise
Imported files stay on the machine you imported them on, encrypted, and are never used to train anything, by anyone.
What is implemented
- Nothing yet for the platform.
- This website collects nothing: no forms, no analytics, no cookies beyond a theme preference you set yourself.
What is planned
- Artifacts stored content-addressed and encrypted at rest with a per-site key.
- Passwords, tokens and certificates found in a backup are replaced with a typed placeholder at import. There is no code path that stores the bytes.
- No endpoint ever serves raw artifact bytes; only derived facts, each with a locator back into the file.
- A written policy, in the repository, that customer engineering data is never used for model training and that the software has no path to a model provider.
How to check it yourself
- Read the importer source: the redaction happens before anything is written.
- Search the database file after an import for a known password from your backup. It will not be there.
Found a gap between this page and the software? Tell us. A promise we cannot keep gets rewritten, not defended.