Local first.You decide what leaves.
Your projects, chats and keys live on your machine. Here is exactly what goes where.
Where your data goes
Everything starts here
Projects, worktrees, chats, keys, settings. Nothing leaves unless one of the three paths on the right is used.
Your AI provider
On your own account or key. Pick Ollama and the model never leaves your machine.
Tatastu account
Your email, for sign-in and phone pairing. No code.
Hosted runs
The scoped repository, credential, checkpoints and results that run needs, in isolated execution.
Stays on your machine
- Your projects and every worktree
- Chats, prompts and history (encrypted at rest if you turn it on)
- Provider keys and sign-in tokens, sealed in the macOS Keychain
- Settings, memory and local databases
Leaves it, and when
- What you send to the AI provider you chose, on your own account
- Your email, when you sign in to a Tatastu account
- A scoped workload, credential, checkpoints and results, only if you start a hosted run
- Crash reports, only if you opt in, scrubbed of keys and paths
No advertising, no profiling, no selling data.
The controls behind it
Keychain-sealed keys
Credentials live in the OS keychain. The interface layer cannot read them.
Isolated interface
Strict content policy and schema-checked calls; agents run in separate processes.
Scoped file access
One enforced gate keeps file operations inside your open projects.
Worktree isolation
Each agent works in its own checkout, so your main branch is never edited in place.
Scrubbed logs
Diagnostics are stripped of keys, tokens and home paths before they are written.
Signed updates
Every update is checked against a key built into the app before it can install.
An update installs only if it proves it is ours.
Checked on your machine, and it fails closed.
- fetchmanifest and files from the pinned CDN, over TLSok
- verifyEd25519 signature, against the key built into the appok
- checkApple Developer ID signature and notarizationok
- asknothing installs until you say soyou
- rejectanything unsigned, altered or olderrefused
Every company in the loop
Found something? Tell us.
We welcome good-faith security research, will not pursue legal action for it, and acknowledge reports within three business days.
security@tatastu.devWhere we stand
We run an internal security program mapped to SOC 2 criteria: access control, change management, incident response, vendor management and a live risk register. We have not completed a third-party SOC 2 audit yet, and we would rather say so plainly.