Data and credentials
Inspect data destinations and protect local state, credentials, and shared material.
- Data flows and outbound sharing: Inspect data by recipient. Working in a desktop application does not mean every byte stays on the machine. Model requests, search, plugins, Hub operations, and sharing are separate outbound paths.
- Protecting local data: Local data includes conversations, memory, experience assets, browser logins, settings, and diagnostics. Identify each purpose and storage scope; a single export is not a backup of the entire application.
- Protect accounts and credentials: Protect your model keys and app authorizations; rotate, revoke, and verify each connection separately.
- Logs and sharing redaction: Inspect the complete delivery before sharing: text, screenshots, attachments, diagnostics, handoffs, and experience assets. Redacting one log does not sanitize the entire package.