docs/guide/13-Privacy-and-Security.md

Privacy and security: your data stays yours

AgentBridge was built around a simple promise: the assistant works inside a limited area, and your data stays on your machine. Every action it takes goes through a small set of approved tools, and there is no hidden way to reach outside that set. The assistant cannot run arbitrary commands, cannot touch anything beyond its workspace, and cannot act on the rest of your computer. This perimeter is enforced by the program's own structure, not by instructions that a clever message could bypass.

The sandbox

Think of the sandbox as a room with a locked door. Inside the room the assistant is powerful: it can read your documents, create files, send email, and browse the web through its tools. Outside the room it can do nothing. Whatever you ask, the assistant's reach is exactly the tools it was given, nothing more.

Anonymisation for cloud providers

When you use a cloud provider, a built-in anonymisation service protects your personal data before any request leaves your machine. Names, keys, and sensitive identifiers are replaced, and then restored seamlessly in the reply. You can enable it with a single switch, and you will not notice any difference in how the assistant works — only in what the outside world can see.

When nothing leaves at all

With a local model, nothing leaves your machine, ever. The only case in which a request travels outside is web research, where the assistant must reach the internet by design, and your documents are never sent along. Everything else — your files, your keys, your conversations — stays exactly where it belongs.

The next guide explains how the assistant remembers what it has learned and how that memory works for you.