TruthSpine/Security
Security.
Your project stays on your computer. A cloud agent sees it only if you connect one and say what it may do.
On your computer
- Your project's record, its history and your settings are kept on your computer. We hold no copy.
- AI apps on your computer connect to TruthSpine right there, on your computer.
- Folders you leave out are not learned from.
Passwords and keys
- It holds back passwords and keys. They are not shown to a chat.
- It can remember which account or service you use, but not the password for it.
- Your GitHub sign-in is kept encrypted on your computer.
Remote access, only if you say so
- It is off until you set it up, in your own free Cloudflare account.
- You choose one project for each connection. Read only, unless you allow more.
- An agent can read your project and, if you allow it, add to it. It cannot open your files or change your settings.
- It works only while TruthSpine is open on your computer. One switch turns it off.
Records you can check
Every entry shows where it came from. Download the full history any time.
Reporting a security problem
Write to support@truthspine.app with "Security" in the subject. Tell us what you found and how to make it happen again, but please leave out your own passwords and keys. We reply to every report and fix real problems in the next update.