Security & data handling

What to expect for your data and security during the beta.

Your data

• Self-hosted: on your own install, your data lives on your server, under your control.
• Accounts are scoped; logs are secret-redacted and line-capped.
• Installs take nightly checksummed backups; upgrades use a reversible path with retained rollback assets.
• The shared demo resets automatically — its data is fake and temporary by design.

Platform security

• Deny-by-default firewall (22/80/443), loopback-only databases, a root agent reachable only over a local socket, and enforced admin 2FA.
• Updates are checksum-verified against a trusted manifest before apply.

More detail on the Security page and in Known limitations.