Privacy & security

What stays on your machine

• Your code, prompts, conversations and settings
• The event log (local SQLite database); terminal output is not stored there, only kept in memory
• Your license (checked offline)

What leaves your machine

• What the CLIs send. Each CLI talks to its own provider — exactly as without OpenCognit.
• The update check. The app reads a version file from the OpenCognit server, without any identifier. Can be switched off.

OpenCognit itself has no telemetry, no tracking and no account.

Limiting agents

• Approvals in threads for writing, commands and pushes
• Guardrails for every input to an agent — and for commands Claude Code runs on its own
• Confirmation of large start requests by the conductor
• The conductor's internal control channel is local only (Unix socket or named pipe), and every request needs a session token
• Web pages in the side panel get no access to camera, location or notifications

Otherwise, agents in a terminal work with the permissions their CLI grants — just as if you started it directly. For Claude Code, OpenCognit also checks every shell command the agent runs (see Guardrails & agent protection).